{ "metadata": { "document_id": "GAISSF-CRO-036", "title": "GAISSF–FedRAMP Mapping", "version": "1.0", "status": "Draft for Publication", "publisher": "ODA3 Institute", "publication_date": "2026-06-29", "verification_date": "2026-06-29", "gaissf_baseline": "GAISSF v1.0, 59 controls across nine domains", "external_baseline": { "current_program_rules": "FedRAMP Consolidated Rules for 2026, launched 25 June 2026", "rev5_path": "NIST SP 800-53 Revision 5 controls; current Rev5 certifications are Class D", "20x_path": "FedRAMP 20x Classes A, B and C available; Class D planned for Phase 4", "authority": "44 U.S.C. § 3607 et seq. and OMB Memorandum M-24-15" }, "scope": { "mapping_level": "FedRAMP/NIST control-family level", "families": 20, "gaissf_controls": 59, "mapping_records": 258, "excluded": [ "Individual FedRAMP Rev5 controls and enhancements", "FedRAMP-defined assignment and selection parameters", "FedRAMP 20x Key Security Indicator implementation details", "SSP, SAP, SAR, POA&M and continuous-monitoring package completion", "Independent assessment conclusions", "Agency Authorization to Operate decisions", "FedRAMP Certification or Marketplace listing" ] } }, "controlled_vocabulary": { "relationship": { "E": "Equivalent or near-equivalent; not assigned in this mapping", "SP": "Strong partial relationship", "P": "Partial relationship", "S": "Supporting relationship", "C": "Contextual relationship", "N": "No material mapping", "O": "Outside scope", "U": "Unable to determine" }, "confidence": [ "High", "Medium-High", "Medium", "Low", "Not Rated" ] }, "gaissf_controls": [ { "id": "D1-CTL-01", "title": "DATASET PROVENANCE & POISONING PREVENTION", "domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "foundational_scope": "Yes" }, { "id": "D1-CTL-02", "title": "MODEL EXTRACTION RESISTANCE", "domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "foundational_scope": "Yes" }, { "id": "D1-CTL-03", "title": "BEHAVIORAL DRIFT DETECTION", "domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "foundational_scope": "Yes" }, { "id": "D1-CTL-04", "title": "FEDERATED LEARNING POISONING PREVENTION", "domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "foundational_scope": "Yes" }, { "id": "D1-CTL-05", "title": "EMBEDDING SPACE ROBUSTNESS", "domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "foundational_scope": "Yes" }, { "id": "D1-CTL-06", "title": "POST-QUANTUM MODEL SIGNING & CRYPTO HARDENING", "domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "foundational_scope": "Yes" }, { "id": "D1-CTL-07", "title": "LORA/ADAPTER INTEGRITY VERIFICATION", "domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "foundational_scope": "Yes" }, { "id": "D1-CTL-08", "title": "MODEL MERGE ATTACK DETECTION", "domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "foundational_scope": "Yes" }, { "id": "D1-CTL-09", "title": "QUANTIZATION BACKDOOR SCREENING", "domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "foundational_scope": "Yes" }, { "id": "D2-CTL-01", "title": "DIRECT PROMPT INJECTION PREVENTION", "domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "foundational_scope": "Yes" }, { "id": "D2-CTL-02", "title": "INDIRECT PROMPT INJECTION PREVENTION", "domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "foundational_scope": "Yes" }, { "id": "D2-CTL-03", "title": "JAILBREAK RESISTANCE TESTING", "domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "foundational_scope": "Yes" }, { "id": "D2-CTL-04", "title": "MULTI-MODAL INJECTION DEFENSE", "domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "foundational_scope": "Yes" }, { "id": "D2-CTL-05", "title": "FUNCTION CALL/TOOL CALL INJECTION PREVENTION", "domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "foundational_scope": "Yes" }, { "id": "D2-CTL-06", "title": "CROSS-CONTEXT HIJACKING MITIGATION", "domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "foundational_scope": "Yes" }, { "id": "D3-CTL-01", "title": "LEAST AGENCY ENFORCEMENT", "domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "foundational_scope": "Yes" }, { "id": "D3-CTL-02", "title": "INTER-AGENT COMMUNICATION SECURITY", "domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "foundational_scope": "Yes" }, { "id": "D3-CTL-03", "title": "AGENTIC PROMPT CHAINING DETECTION", "domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "foundational_scope": "Yes" }, { "id": "D3-CTL-04", "title": "EMBODIED AI SAFETY CONTROLS", "domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "foundational_scope": "Yes" }, { "id": "D3-CTL-05", "title": "MULTI-AGENT TRUST CHAIN ATTESTATION", "domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "foundational_scope": "Yes" }, { "id": "D3-CTL-06", "title": "PERSISTENT MEMORY EXFILTRATION PREVENTION", "domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "foundational_scope": "Yes" }, { "id": "D3-CTL-07", "title": "SECURE MEMORY LIFECYCLE MANAGEMENT", "domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "foundational_scope": "Yes" }, { "id": "D4-CTL-01", "title": "AI BILL OF MATERIALS (AI BOM) MAINTENANCE", "domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "foundational_scope": "Yes" }, { "id": "D4-CTL-02", "title": "MODEL FILE & ARTIFACT SCANNING", "domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "foundational_scope": "Yes" }, { "id": "D4-CTL-03", "title": "MODEL HUB & REGISTRY VETTING", "domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "foundational_scope": "Yes" }, { "id": "D4-CTL-04", "title": "MCP SERVER BEHAVIORAL MONITORING", "domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "foundational_scope": "Yes" }, { "id": "D4-CTL-05", "title": "THIRD-PARTY AI API SECURITY ASSESSMENT", "domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "foundational_scope": "Yes" }, { "id": "D4-CTL-06", "title": "SHADOW AI DISCOVERY & GOVERNANCE", "domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "foundational_scope": "Yes" }, { "id": "D4-CTL-07", "title": "AI SOFTWARE COMPOSITION ANALYSIS (SCA)", "domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "foundational_scope": "Yes" }, { "id": "D5-CTL-01", "title": "HARMFUL CONTENT BLOCKING", "domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "foundational_scope": "Yes" }, { "id": "D5-CTL-02", "title": "PII LEAKAGE PREVENTION", "domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "foundational_scope": "Yes" }, { "id": "D5-CTL-03", "title": "COPYRIGHT DETECTION", "domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "foundational_scope": "Yes" }, { "id": "D5-CTL-04", "title": "AI WATERMARKING ROBUSTNESS", "domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "foundational_scope": "Yes" }, { "id": "D5-CTL-05", "title": "PRIVACY-BY-DESIGN VERIFICATION", "domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "foundational_scope": "Yes" }, { "id": "D5-CTL-06", "title": "PRIVACY-PRESERVING ML VALIDATION", "domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "foundational_scope": "Yes" }, { "id": "D6-CTL-01", "title": "HUMAN-IN-THE-LOOP FOR HIGH-RISK ACTIONS", "domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "foundational_scope": "Yes" }, { "id": "D6-CTL-02", "title": "AUDIT TRAIL COMPLETENESS", "domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "foundational_scope": "Yes" }, { "id": "D6-CTL-03", "title": "AI MODEL CARD COMPLETENESS", "domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "foundational_scope": "Yes" }, { "id": "D6-CTL-04", "title": "AI INCIDENT RESPONSE READINESS", "domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "foundational_scope": "Yes" }, { "id": "D6-CTL-05", "title": "MODEL DEPRECATION & DECOMMISSIONING", "domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "foundational_scope": "Yes" }, { "id": "D6-CTL-06", "title": "THIRD-PARTY AI VENDOR GOVERNANCE", "domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "foundational_scope": "Yes" }, { "id": "D6-CTL-07", "title": "AI RESILIENCE & BUSINESS CONTINUITY", "domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "foundational_scope": "Yes" }, { "id": "D7-CTL-H01", "title": "AI-GENERATED PHISHING SIMULATION", "domain": "D7: HUMAN & SOCIETAL HARMS", "foundational_scope": "Yes" }, { "id": "D7-CTL-H02", "title": "DEEPFAKE DETECTION TRAINING", "domain": "D7: HUMAN & SOCIETAL HARMS", "foundational_scope": "Yes" }, { "id": "D7-CTL-H03", "title": "OUT-OF-BAND AUTHENTICATION", "domain": "D7: HUMAN & SOCIETAL HARMS", "foundational_scope": "Yes" }, { "id": "D7-CTL-H04", "title": "AI SOCIAL ENGINEERING IR", "domain": "D7: HUMAN & SOCIETAL HARMS", "foundational_scope": "Yes" }, { "id": "D7-CTL-H05", "title": "AI-ENHANCED EXTERNAL ATTACK DEFENSE", "domain": "D7: HUMAN & SOCIETAL HARMS", "foundational_scope": "Yes" }, { "id": "D8-CTL-01", "title": "EU AI ACT RISK TIER MAPPING", "domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "foundational_scope": "Yes" }, { "id": "D8-CTL-02", "title": "ISO 42001 GAP ANALYSIS", "domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "foundational_scope": "Yes" }, { "id": "D8-CTL-03", "title": "GPAI TECHNICAL DOCUMENTATION VERIFICATION", "domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "foundational_scope": "Yes" }, { "id": "D8-CTL-04", "title": "DORA ICT INCIDENT REPORTING (FINANCIAL SECTOR)", "domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "foundational_scope": "Yes" }, { "id": "D8-CTL-05", "title": "NIST SP 800-218A COMPLIANCE CHECK", "domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "foundational_scope": "Yes" }, { "id": "D9-CTL-01", "title": "PHYSICAL HARM BOUNDARY ENFORCEMENT", "domain": "D9: PHYSICAL AI SAFETY", "foundational_scope": "No — apply where physical AI is in scope" }, { "id": "D9-CTL-02", "title": "SAFE STATE AND GRACEFUL DEGRADATION", "domain": "D9: PHYSICAL AI SAFETY", "foundational_scope": "No — apply where physical AI is in scope" }, { "id": "D9-CTL-03", "title": "HUMAN OVERRIDE AND EMERGENCY STOP", "domain": "D9: PHYSICAL AI SAFETY", "foundational_scope": "No — apply where physical AI is in scope" }, { "id": "D9-CTL-04", "title": "CYBER-PHYSICAL ATTACK DETECTION", "domain": "D9: PHYSICAL AI SAFETY", "foundational_scope": "No — apply where physical AI is in scope" }, { "id": "D9-CTL-05", "title": "PHYSICAL ENVIRONMENT INTEGRITY MONITORING", "domain": "D9: PHYSICAL AI SAFETY", "foundational_scope": "No — apply where physical AI is in scope" }, { "id": "D9-CTL-06", "title": "ACTUATOR COMMAND VERIFICATION", "domain": "D9: PHYSICAL AI SAFETY", "foundational_scope": "No — apply where physical AI is in scope" }, { "id": "D9-CTL-07", "title": "PHYSICAL INCIDENT EVIDENCE PRESERVATION", "domain": "D9: PHYSICAL AI SAFETY", "foundational_scope": "No — apply where physical AI is in scope" } ], "fedramp_control_families": [ { "code": "AC", "title": "Access Control", "summary": "Account and privilege management, access enforcement, separation of duties, least privilege, remote access and information flow." }, { "code": "AT", "title": "Awareness and Training", "summary": "Security literacy, role-based training, social engineering awareness and training records." }, { "code": "AU", "title": "Audit and Accountability", "summary": "Event logging, audit record content, review, retention, protection and accountability." }, { "code": "CA", "title": "Assessment, Authorization and Monitoring", "summary": "Control assessment, authorization decisions, continuous monitoring, plans of action and milestones." }, { "code": "CM", "title": "Configuration Management", "summary": "Baselines, configuration settings, change control, inventories and least functionality." }, { "code": "CP", "title": "Contingency Planning", "summary": "Business continuity, backups, recovery, alternate processing and contingency testing." }, { "code": "IA", "title": "Identification and Authentication", "summary": "Identity proofing, multifactor authentication, authenticator management and service identification." }, { "code": "IR", "title": "Incident Response", "summary": "Preparation, detection, analysis, containment, recovery, reporting and incident handling." }, { "code": "MA", "title": "Maintenance", "summary": "Controlled maintenance, tools, personnel, remote maintenance and maintenance records." }, { "code": "MP", "title": "Media Protection", "summary": "Media access, marking, storage, transport, sanitization and use." }, { "code": "PE", "title": "Physical and Environmental Protection", "summary": "Physical access, monitoring, emergency power, fire protection and environmental safeguards." }, { "code": "PL", "title": "Planning", "summary": "System security planning, rules of behavior, architecture and privacy planning." }, { "code": "PM", "title": "Program Management", "summary": "Enterprise security and privacy governance, risk strategy, resources, inventories and program oversight." }, { "code": "PS", "title": "Personnel Security", "summary": "Screening, termination, transfer, sanctions and external personnel security." }, { "code": "PT", "title": "Personally Identifiable Information Processing and Transparency", "summary": "Privacy authority, purpose, minimization, consent, notices, rights and data quality." }, { "code": "RA", "title": "Risk Assessment", "summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk." }, { "code": "SA", "title": "System and Services Acquisition", "summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls." }, { "code": "SC", "title": "System and Communications Protection", "summary": "Boundary protection, cryptography, architecture, transmission security, isolation and denial-of-service protection." }, { "code": "SI", "title": "System and Information Integrity", "summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling." }, { "code": "SR", "title": "Supply Chain Risk Management", "summary": "Supply-chain plans, provenance, supplier assessments, component authenticity and acquisition risk." } ], "mappings": [ { "record_id": "GAISSF-CRO-036-MAP-0001", "gaissf_id": "D1-CTL-01", "gaissf_title": "DATASET PROVENANCE & POISONING PREVENTION", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D1-CTL-01 Dataset Provenance & Poisoning Prevention contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0002", "gaissf_id": "D1-CTL-01", "gaissf_title": "DATASET PROVENANCE & POISONING PREVENTION", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D1-CTL-01 Dataset Provenance & Poisoning Prevention contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0003", "gaissf_id": "D1-CTL-01", "gaissf_title": "DATASET PROVENANCE & POISONING PREVENTION", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D1-CTL-01 Dataset Provenance & Poisoning Prevention contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0004", "gaissf_id": "D1-CTL-01", "gaissf_title": "DATASET PROVENANCE & POISONING PREVENTION", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SR", "family_title": "Supply Chain Risk Management", "family_summary": "Supply-chain plans, provenance, supplier assessments, component authenticity and acquisition risk.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D1-CTL-01 Dataset Provenance & Poisoning Prevention contributes AI-specific capability to the Supply Chain Risk Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0005", "gaissf_id": "D1-CTL-02", "gaissf_title": "MODEL EXTRACTION RESISTANCE", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D1-CTL-02 Model Extraction Resistance contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0006", "gaissf_id": "D1-CTL-02", "gaissf_title": "MODEL EXTRACTION RESISTANCE", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D1-CTL-02 Model Extraction Resistance contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0007", "gaissf_id": "D1-CTL-02", "gaissf_title": "MODEL EXTRACTION RESISTANCE", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D1-CTL-02 Model Extraction Resistance contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0008", "gaissf_id": "D1-CTL-02", "gaissf_title": "MODEL EXTRACTION RESISTANCE", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SR", "family_title": "Supply Chain Risk Management", "family_summary": "Supply-chain plans, provenance, supplier assessments, component authenticity and acquisition risk.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D1-CTL-02 Model Extraction Resistance contributes AI-specific capability to the Supply Chain Risk Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0009", "gaissf_id": "D1-CTL-03", "gaissf_title": "BEHAVIORAL DRIFT DETECTION", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D1-CTL-03 Behavioral Drift Detection contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0010", "gaissf_id": "D1-CTL-03", "gaissf_title": "BEHAVIORAL DRIFT DETECTION", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D1-CTL-03 Behavioral Drift Detection contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0011", "gaissf_id": "D1-CTL-03", "gaissf_title": "BEHAVIORAL DRIFT DETECTION", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D1-CTL-03 Behavioral Drift Detection contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0012", "gaissf_id": "D1-CTL-03", "gaissf_title": "BEHAVIORAL DRIFT DETECTION", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SR", "family_title": "Supply Chain Risk Management", "family_summary": "Supply-chain plans, provenance, supplier assessments, component authenticity and acquisition risk.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D1-CTL-03 Behavioral Drift Detection contributes AI-specific capability to the Supply Chain Risk Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0013", "gaissf_id": "D1-CTL-04", "gaissf_title": "FEDERATED LEARNING POISONING PREVENTION", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D1-CTL-04 Federated Learning Poisoning Prevention contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0014", "gaissf_id": "D1-CTL-04", "gaissf_title": "FEDERATED LEARNING POISONING PREVENTION", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D1-CTL-04 Federated Learning Poisoning Prevention contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0015", "gaissf_id": "D1-CTL-04", "gaissf_title": "FEDERATED LEARNING POISONING PREVENTION", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D1-CTL-04 Federated Learning Poisoning Prevention contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0016", "gaissf_id": "D1-CTL-04", "gaissf_title": "FEDERATED LEARNING POISONING PREVENTION", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SR", "family_title": "Supply Chain Risk Management", "family_summary": "Supply-chain plans, provenance, supplier assessments, component authenticity and acquisition risk.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D1-CTL-04 Federated Learning Poisoning Prevention contributes AI-specific capability to the Supply Chain Risk Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0017", "gaissf_id": "D1-CTL-05", "gaissf_title": "EMBEDDING SPACE ROBUSTNESS", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D1-CTL-05 Embedding Space Robustness contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0018", "gaissf_id": "D1-CTL-05", "gaissf_title": "EMBEDDING SPACE ROBUSTNESS", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D1-CTL-05 Embedding Space Robustness contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0019", "gaissf_id": "D1-CTL-05", "gaissf_title": "EMBEDDING SPACE ROBUSTNESS", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D1-CTL-05 Embedding Space Robustness contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0020", "gaissf_id": "D1-CTL-05", "gaissf_title": "EMBEDDING SPACE ROBUSTNESS", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SR", "family_title": "Supply Chain Risk Management", "family_summary": "Supply-chain plans, provenance, supplier assessments, component authenticity and acquisition risk.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D1-CTL-05 Embedding Space Robustness contributes AI-specific capability to the Supply Chain Risk Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0021", "gaissf_id": "D1-CTL-06", "gaissf_title": "POST-QUANTUM MODEL SIGNING & CRYPTO HARDENING", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D1-CTL-06 Post-Quantum Model Signing & Crypto Hardening contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0022", "gaissf_id": "D1-CTL-06", "gaissf_title": "POST-QUANTUM MODEL SIGNING & CRYPTO HARDENING", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D1-CTL-06 Post-Quantum Model Signing & Crypto Hardening contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0023", "gaissf_id": "D1-CTL-06", "gaissf_title": "POST-QUANTUM MODEL SIGNING & CRYPTO HARDENING", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D1-CTL-06 Post-Quantum Model Signing & Crypto Hardening contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0024", "gaissf_id": "D1-CTL-06", "gaissf_title": "POST-QUANTUM MODEL SIGNING & CRYPTO HARDENING", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SR", "family_title": "Supply Chain Risk Management", "family_summary": "Supply-chain plans, provenance, supplier assessments, component authenticity and acquisition risk.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D1-CTL-06 Post-Quantum Model Signing & Crypto Hardening contributes AI-specific capability to the Supply Chain Risk Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0025", "gaissf_id": "D1-CTL-06", "gaissf_title": "POST-QUANTUM MODEL SIGNING & CRYPTO HARDENING", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SC", "family_title": "System and Communications Protection", "family_summary": "Boundary protection, cryptography, architecture, transmission security, isolation and denial-of-service protection.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D1-CTL-06 Post-Quantum Model Signing & Crypto Hardening contributes AI-specific capability to the System and Communications Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0026", "gaissf_id": "D1-CTL-07", "gaissf_title": "LORA/ADAPTER INTEGRITY VERIFICATION", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D1-CTL-07 Lora/Adapter Integrity Verification contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0027", "gaissf_id": "D1-CTL-07", "gaissf_title": "LORA/ADAPTER INTEGRITY VERIFICATION", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D1-CTL-07 Lora/Adapter Integrity Verification contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0028", "gaissf_id": "D1-CTL-07", "gaissf_title": "LORA/ADAPTER INTEGRITY VERIFICATION", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D1-CTL-07 Lora/Adapter Integrity Verification contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0029", "gaissf_id": "D1-CTL-07", "gaissf_title": "LORA/ADAPTER INTEGRITY VERIFICATION", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SR", "family_title": "Supply Chain Risk Management", "family_summary": "Supply-chain plans, provenance, supplier assessments, component authenticity and acquisition risk.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D1-CTL-07 Lora/Adapter Integrity Verification contributes AI-specific capability to the Supply Chain Risk Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0030", "gaissf_id": "D1-CTL-08", "gaissf_title": "MODEL MERGE ATTACK DETECTION", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D1-CTL-08 Model Merge Attack Detection contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0031", "gaissf_id": "D1-CTL-08", "gaissf_title": "MODEL MERGE ATTACK DETECTION", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D1-CTL-08 Model Merge Attack Detection contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0032", "gaissf_id": "D1-CTL-08", "gaissf_title": "MODEL MERGE ATTACK DETECTION", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D1-CTL-08 Model Merge Attack Detection contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0033", "gaissf_id": "D1-CTL-08", "gaissf_title": "MODEL MERGE ATTACK DETECTION", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SR", "family_title": "Supply Chain Risk Management", "family_summary": "Supply-chain plans, provenance, supplier assessments, component authenticity and acquisition risk.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D1-CTL-08 Model Merge Attack Detection contributes AI-specific capability to the Supply Chain Risk Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0034", "gaissf_id": "D1-CTL-09", "gaissf_title": "QUANTIZATION BACKDOOR SCREENING", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D1-CTL-09 Quantization Backdoor Screening contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0035", "gaissf_id": "D1-CTL-09", "gaissf_title": "QUANTIZATION BACKDOOR SCREENING", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D1-CTL-09 Quantization Backdoor Screening contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0036", "gaissf_id": "D1-CTL-09", "gaissf_title": "QUANTIZATION BACKDOOR SCREENING", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D1-CTL-09 Quantization Backdoor Screening contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0037", "gaissf_id": "D1-CTL-09", "gaissf_title": "QUANTIZATION BACKDOOR SCREENING", "gaissf_domain": "D1: MODEL INTEGRITY & ADVERSARIAL ROBUSTNESS", "fedramp_family": "SR", "family_title": "Supply Chain Risk Management", "family_summary": "Supply-chain plans, provenance, supplier assessments, component authenticity and acquisition risk.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D1-CTL-09 Quantization Backdoor Screening contributes AI-specific capability to the Supply Chain Risk Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0038", "gaissf_id": "D2-CTL-01", "gaissf_title": "DIRECT PROMPT INJECTION PREVENTION", "gaissf_domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "fedramp_family": "AC", "family_title": "Access Control", "family_summary": "Account and privilege management, access enforcement, separation of duties, least privilege, remote access and information flow.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D2-CTL-01 Direct Prompt Injection Prevention contributes AI-specific capability to the Access Control outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0039", "gaissf_id": "D2-CTL-01", "gaissf_title": "DIRECT PROMPT INJECTION PREVENTION", "gaissf_domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "fedramp_family": "SC", "family_title": "System and Communications Protection", "family_summary": "Boundary protection, cryptography, architecture, transmission security, isolation and denial-of-service protection.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D2-CTL-01 Direct Prompt Injection Prevention contributes AI-specific capability to the System and Communications Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0040", "gaissf_id": "D2-CTL-01", "gaissf_title": "DIRECT PROMPT INJECTION PREVENTION", "gaissf_domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D2-CTL-01 Direct Prompt Injection Prevention contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0041", "gaissf_id": "D2-CTL-01", "gaissf_title": "DIRECT PROMPT INJECTION PREVENTION", "gaissf_domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D2-CTL-01 Direct Prompt Injection Prevention contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0042", "gaissf_id": "D2-CTL-02", "gaissf_title": "INDIRECT PROMPT INJECTION PREVENTION", "gaissf_domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "fedramp_family": "AC", "family_title": "Access Control", "family_summary": "Account and privilege management, access enforcement, separation of duties, least privilege, remote access and information flow.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D2-CTL-02 Indirect Prompt Injection Prevention contributes AI-specific capability to the Access Control outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0043", "gaissf_id": "D2-CTL-02", "gaissf_title": "INDIRECT PROMPT INJECTION PREVENTION", "gaissf_domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "fedramp_family": "SC", "family_title": "System and Communications Protection", "family_summary": "Boundary protection, cryptography, architecture, transmission security, isolation and denial-of-service protection.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D2-CTL-02 Indirect Prompt Injection Prevention contributes AI-specific capability to the System and Communications Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0044", "gaissf_id": "D2-CTL-02", "gaissf_title": "INDIRECT PROMPT INJECTION PREVENTION", "gaissf_domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D2-CTL-02 Indirect Prompt Injection Prevention contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0045", "gaissf_id": "D2-CTL-02", "gaissf_title": "INDIRECT PROMPT INJECTION PREVENTION", "gaissf_domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D2-CTL-02 Indirect Prompt Injection Prevention contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0046", "gaissf_id": "D2-CTL-03", "gaissf_title": "JAILBREAK RESISTANCE TESTING", "gaissf_domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "fedramp_family": "AC", "family_title": "Access Control", "family_summary": "Account and privilege management, access enforcement, separation of duties, least privilege, remote access and information flow.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D2-CTL-03 Jailbreak Resistance Testing contributes AI-specific capability to the Access Control outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0047", "gaissf_id": "D2-CTL-03", "gaissf_title": "JAILBREAK RESISTANCE TESTING", "gaissf_domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "fedramp_family": "SC", "family_title": "System and Communications Protection", "family_summary": "Boundary protection, cryptography, architecture, transmission security, isolation and denial-of-service protection.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D2-CTL-03 Jailbreak Resistance Testing contributes AI-specific capability to the System and Communications Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0048", "gaissf_id": "D2-CTL-03", "gaissf_title": "JAILBREAK RESISTANCE TESTING", "gaissf_domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D2-CTL-03 Jailbreak Resistance Testing contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0049", "gaissf_id": "D2-CTL-03", "gaissf_title": "JAILBREAK RESISTANCE TESTING", "gaissf_domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D2-CTL-03 Jailbreak Resistance Testing contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0050", "gaissf_id": "D2-CTL-04", "gaissf_title": "MULTI-MODAL INJECTION DEFENSE", "gaissf_domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "fedramp_family": "AC", "family_title": "Access Control", "family_summary": "Account and privilege management, access enforcement, separation of duties, least privilege, remote access and information flow.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D2-CTL-04 Multi-Modal Injection Defense contributes AI-specific capability to the Access Control outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0051", "gaissf_id": "D2-CTL-04", "gaissf_title": "MULTI-MODAL INJECTION DEFENSE", "gaissf_domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "fedramp_family": "SC", "family_title": "System and Communications Protection", "family_summary": "Boundary protection, cryptography, architecture, transmission security, isolation and denial-of-service protection.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D2-CTL-04 Multi-Modal Injection Defense contributes AI-specific capability to the System and Communications Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0052", "gaissf_id": "D2-CTL-04", "gaissf_title": "MULTI-MODAL INJECTION DEFENSE", "gaissf_domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D2-CTL-04 Multi-Modal Injection Defense contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0053", "gaissf_id": "D2-CTL-04", "gaissf_title": "MULTI-MODAL INJECTION DEFENSE", "gaissf_domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D2-CTL-04 Multi-Modal Injection Defense contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0054", "gaissf_id": "D2-CTL-05", "gaissf_title": "FUNCTION CALL/TOOL CALL INJECTION PREVENTION", "gaissf_domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "fedramp_family": "AC", "family_title": "Access Control", "family_summary": "Account and privilege management, access enforcement, separation of duties, least privilege, remote access and information flow.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D2-CTL-05 Function Call/Tool Call Injection Prevention contributes AI-specific capability to the Access Control outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0055", "gaissf_id": "D2-CTL-05", "gaissf_title": "FUNCTION CALL/TOOL CALL INJECTION PREVENTION", "gaissf_domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "fedramp_family": "SC", "family_title": "System and Communications Protection", "family_summary": "Boundary protection, cryptography, architecture, transmission security, isolation and denial-of-service protection.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D2-CTL-05 Function Call/Tool Call Injection Prevention contributes AI-specific capability to the System and Communications Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0056", "gaissf_id": "D2-CTL-05", "gaissf_title": "FUNCTION CALL/TOOL CALL INJECTION PREVENTION", "gaissf_domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D2-CTL-05 Function Call/Tool Call Injection Prevention contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0057", "gaissf_id": "D2-CTL-05", "gaissf_title": "FUNCTION CALL/TOOL CALL INJECTION PREVENTION", "gaissf_domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D2-CTL-05 Function Call/Tool Call Injection Prevention contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0058", "gaissf_id": "D2-CTL-06", "gaissf_title": "CROSS-CONTEXT HIJACKING MITIGATION", "gaissf_domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "fedramp_family": "AC", "family_title": "Access Control", "family_summary": "Account and privilege management, access enforcement, separation of duties, least privilege, remote access and information flow.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D2-CTL-06 Cross-Context Hijacking Mitigation contributes AI-specific capability to the Access Control outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0059", "gaissf_id": "D2-CTL-06", "gaissf_title": "CROSS-CONTEXT HIJACKING MITIGATION", "gaissf_domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "fedramp_family": "SC", "family_title": "System and Communications Protection", "family_summary": "Boundary protection, cryptography, architecture, transmission security, isolation and denial-of-service protection.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D2-CTL-06 Cross-Context Hijacking Mitigation contributes AI-specific capability to the System and Communications Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0060", "gaissf_id": "D2-CTL-06", "gaissf_title": "CROSS-CONTEXT HIJACKING MITIGATION", "gaissf_domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D2-CTL-06 Cross-Context Hijacking Mitigation contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0061", "gaissf_id": "D2-CTL-06", "gaissf_title": "CROSS-CONTEXT HIJACKING MITIGATION", "gaissf_domain": "D2: RUNTIME SECURITY & ADVERSARIAL DEFENSE", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D2-CTL-06 Cross-Context Hijacking Mitigation contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0062", "gaissf_id": "D3-CTL-01", "gaissf_title": "LEAST AGENCY ENFORCEMENT", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "AC", "family_title": "Access Control", "family_summary": "Account and privilege management, access enforcement, separation of duties, least privilege, remote access and information flow.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D3-CTL-01 Least Agency Enforcement contributes AI-specific capability to the Access Control outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0063", "gaissf_id": "D3-CTL-01", "gaissf_title": "LEAST AGENCY ENFORCEMENT", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "IA", "family_title": "Identification and Authentication", "family_summary": "Identity proofing, multifactor authentication, authenticator management and service identification.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D3-CTL-01 Least Agency Enforcement contributes AI-specific capability to the Identification and Authentication outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0064", "gaissf_id": "D3-CTL-01", "gaissf_title": "LEAST AGENCY ENFORCEMENT", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "SC", "family_title": "System and Communications Protection", "family_summary": "Boundary protection, cryptography, architecture, transmission security, isolation and denial-of-service protection.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D3-CTL-01 Least Agency Enforcement contributes AI-specific capability to the System and Communications Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0065", "gaissf_id": "D3-CTL-01", "gaissf_title": "LEAST AGENCY ENFORCEMENT", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D3-CTL-01 Least Agency Enforcement contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0066", "gaissf_id": "D3-CTL-01", "gaissf_title": "LEAST AGENCY ENFORCEMENT", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D3-CTL-01 Least Agency Enforcement contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0067", "gaissf_id": "D3-CTL-02", "gaissf_title": "INTER-AGENT COMMUNICATION SECURITY", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "AC", "family_title": "Access Control", "family_summary": "Account and privilege management, access enforcement, separation of duties, least privilege, remote access and information flow.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D3-CTL-02 Inter-Agent Communication Security contributes AI-specific capability to the Access Control outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0068", "gaissf_id": "D3-CTL-02", "gaissf_title": "INTER-AGENT COMMUNICATION SECURITY", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "IA", "family_title": "Identification and Authentication", "family_summary": "Identity proofing, multifactor authentication, authenticator management and service identification.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D3-CTL-02 Inter-Agent Communication Security contributes AI-specific capability to the Identification and Authentication outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0069", "gaissf_id": "D3-CTL-02", "gaissf_title": "INTER-AGENT COMMUNICATION SECURITY", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "SC", "family_title": "System and Communications Protection", "family_summary": "Boundary protection, cryptography, architecture, transmission security, isolation and denial-of-service protection.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D3-CTL-02 Inter-Agent Communication Security contributes AI-specific capability to the System and Communications Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0070", "gaissf_id": "D3-CTL-02", "gaissf_title": "INTER-AGENT COMMUNICATION SECURITY", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D3-CTL-02 Inter-Agent Communication Security contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0071", "gaissf_id": "D3-CTL-02", "gaissf_title": "INTER-AGENT COMMUNICATION SECURITY", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D3-CTL-02 Inter-Agent Communication Security contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0072", "gaissf_id": "D3-CTL-03", "gaissf_title": "AGENTIC PROMPT CHAINING DETECTION", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "AC", "family_title": "Access Control", "family_summary": "Account and privilege management, access enforcement, separation of duties, least privilege, remote access and information flow.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D3-CTL-03 Agentic Prompt Chaining Detection contributes AI-specific capability to the Access Control outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0073", "gaissf_id": "D3-CTL-03", "gaissf_title": "AGENTIC PROMPT CHAINING DETECTION", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "IA", "family_title": "Identification and Authentication", "family_summary": "Identity proofing, multifactor authentication, authenticator management and service identification.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D3-CTL-03 Agentic Prompt Chaining Detection contributes AI-specific capability to the Identification and Authentication outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0074", "gaissf_id": "D3-CTL-03", "gaissf_title": "AGENTIC PROMPT CHAINING DETECTION", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "SC", "family_title": "System and Communications Protection", "family_summary": "Boundary protection, cryptography, architecture, transmission security, isolation and denial-of-service protection.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D3-CTL-03 Agentic Prompt Chaining Detection contributes AI-specific capability to the System and Communications Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0075", "gaissf_id": "D3-CTL-03", "gaissf_title": "AGENTIC PROMPT CHAINING DETECTION", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D3-CTL-03 Agentic Prompt Chaining Detection contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0076", "gaissf_id": "D3-CTL-03", "gaissf_title": "AGENTIC PROMPT CHAINING DETECTION", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D3-CTL-03 Agentic Prompt Chaining Detection contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0077", "gaissf_id": "D3-CTL-03", "gaissf_title": "AGENTIC PROMPT CHAINING DETECTION", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D3-CTL-03 Agentic Prompt Chaining Detection contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0078", "gaissf_id": "D3-CTL-04", "gaissf_title": "EMBODIED AI SAFETY CONTROLS", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "AC", "family_title": "Access Control", "family_summary": "Account and privilege management, access enforcement, separation of duties, least privilege, remote access and information flow.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D3-CTL-04 Embodied Ai Safety Controls contributes AI-specific capability to the Access Control outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0079", "gaissf_id": "D3-CTL-04", "gaissf_title": "EMBODIED AI SAFETY CONTROLS", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "IA", "family_title": "Identification and Authentication", "family_summary": "Identity proofing, multifactor authentication, authenticator management and service identification.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D3-CTL-04 Embodied Ai Safety Controls contributes AI-specific capability to the Identification and Authentication outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0080", "gaissf_id": "D3-CTL-04", "gaissf_title": "EMBODIED AI SAFETY CONTROLS", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "SC", "family_title": "System and Communications Protection", "family_summary": "Boundary protection, cryptography, architecture, transmission security, isolation and denial-of-service protection.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D3-CTL-04 Embodied Ai Safety Controls contributes AI-specific capability to the System and Communications Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0081", "gaissf_id": "D3-CTL-04", "gaissf_title": "EMBODIED AI SAFETY CONTROLS", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D3-CTL-04 Embodied Ai Safety Controls contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0082", "gaissf_id": "D3-CTL-04", "gaissf_title": "EMBODIED AI SAFETY CONTROLS", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D3-CTL-04 Embodied Ai Safety Controls contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0083", "gaissf_id": "D3-CTL-05", "gaissf_title": "MULTI-AGENT TRUST CHAIN ATTESTATION", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "AC", "family_title": "Access Control", "family_summary": "Account and privilege management, access enforcement, separation of duties, least privilege, remote access and information flow.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D3-CTL-05 Multi-Agent Trust Chain Attestation contributes AI-specific capability to the Access Control outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0084", "gaissf_id": "D3-CTL-05", "gaissf_title": "MULTI-AGENT TRUST CHAIN ATTESTATION", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "IA", "family_title": "Identification and Authentication", "family_summary": "Identity proofing, multifactor authentication, authenticator management and service identification.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D3-CTL-05 Multi-Agent Trust Chain Attestation contributes AI-specific capability to the Identification and Authentication outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0085", "gaissf_id": "D3-CTL-05", "gaissf_title": "MULTI-AGENT TRUST CHAIN ATTESTATION", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "SC", "family_title": "System and Communications Protection", "family_summary": "Boundary protection, cryptography, architecture, transmission security, isolation and denial-of-service protection.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D3-CTL-05 Multi-Agent Trust Chain Attestation contributes AI-specific capability to the System and Communications Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0086", "gaissf_id": "D3-CTL-05", "gaissf_title": "MULTI-AGENT TRUST CHAIN ATTESTATION", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D3-CTL-05 Multi-Agent Trust Chain Attestation contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0087", "gaissf_id": "D3-CTL-05", "gaissf_title": "MULTI-AGENT TRUST CHAIN ATTESTATION", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D3-CTL-05 Multi-Agent Trust Chain Attestation contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0088", "gaissf_id": "D3-CTL-06", "gaissf_title": "PERSISTENT MEMORY EXFILTRATION PREVENTION", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "AC", "family_title": "Access Control", "family_summary": "Account and privilege management, access enforcement, separation of duties, least privilege, remote access and information flow.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D3-CTL-06 Persistent Memory Exfiltration Prevention contributes AI-specific capability to the Access Control outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0089", "gaissf_id": "D3-CTL-06", "gaissf_title": "PERSISTENT MEMORY EXFILTRATION PREVENTION", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "IA", "family_title": "Identification and Authentication", "family_summary": "Identity proofing, multifactor authentication, authenticator management and service identification.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D3-CTL-06 Persistent Memory Exfiltration Prevention contributes AI-specific capability to the Identification and Authentication outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0090", "gaissf_id": "D3-CTL-06", "gaissf_title": "PERSISTENT MEMORY EXFILTRATION PREVENTION", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "SC", "family_title": "System and Communications Protection", "family_summary": "Boundary protection, cryptography, architecture, transmission security, isolation and denial-of-service protection.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D3-CTL-06 Persistent Memory Exfiltration Prevention contributes AI-specific capability to the System and Communications Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0091", "gaissf_id": "D3-CTL-06", "gaissf_title": "PERSISTENT MEMORY EXFILTRATION PREVENTION", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D3-CTL-06 Persistent Memory Exfiltration Prevention contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0092", "gaissf_id": "D3-CTL-06", "gaissf_title": "PERSISTENT MEMORY EXFILTRATION PREVENTION", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D3-CTL-06 Persistent Memory Exfiltration Prevention contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0093", "gaissf_id": "D3-CTL-06", "gaissf_title": "PERSISTENT MEMORY EXFILTRATION PREVENTION", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "MP", "family_title": "Media Protection", "family_summary": "Media access, marking, storage, transport, sanitization and use.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D3-CTL-06 Persistent Memory Exfiltration Prevention contributes AI-specific capability to the Media Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0094", "gaissf_id": "D3-CTL-07", "gaissf_title": "SECURE MEMORY LIFECYCLE MANAGEMENT", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "AC", "family_title": "Access Control", "family_summary": "Account and privilege management, access enforcement, separation of duties, least privilege, remote access and information flow.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D3-CTL-07 Secure Memory Lifecycle Management contributes AI-specific capability to the Access Control outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0095", "gaissf_id": "D3-CTL-07", "gaissf_title": "SECURE MEMORY LIFECYCLE MANAGEMENT", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "IA", "family_title": "Identification and Authentication", "family_summary": "Identity proofing, multifactor authentication, authenticator management and service identification.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D3-CTL-07 Secure Memory Lifecycle Management contributes AI-specific capability to the Identification and Authentication outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0096", "gaissf_id": "D3-CTL-07", "gaissf_title": "SECURE MEMORY LIFECYCLE MANAGEMENT", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "SC", "family_title": "System and Communications Protection", "family_summary": "Boundary protection, cryptography, architecture, transmission security, isolation and denial-of-service protection.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D3-CTL-07 Secure Memory Lifecycle Management contributes AI-specific capability to the System and Communications Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0097", "gaissf_id": "D3-CTL-07", "gaissf_title": "SECURE MEMORY LIFECYCLE MANAGEMENT", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D3-CTL-07 Secure Memory Lifecycle Management contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0098", "gaissf_id": "D3-CTL-07", "gaissf_title": "SECURE MEMORY LIFECYCLE MANAGEMENT", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D3-CTL-07 Secure Memory Lifecycle Management contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0099", "gaissf_id": "D3-CTL-07", "gaissf_title": "SECURE MEMORY LIFECYCLE MANAGEMENT", "gaissf_domain": "D3: AGENTIC RISK & AUTONOMOUS SYSTEM SECURITY", "fedramp_family": "MP", "family_title": "Media Protection", "family_summary": "Media access, marking, storage, transport, sanitization and use.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D3-CTL-07 Secure Memory Lifecycle Management contributes AI-specific capability to the Media Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0100", "gaissf_id": "D4-CTL-01", "gaissf_title": "AI BILL OF MATERIALS (AI BOM) MAINTENANCE", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "SR", "family_title": "Supply Chain Risk Management", "family_summary": "Supply-chain plans, provenance, supplier assessments, component authenticity and acquisition risk.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D4-CTL-01 Ai Bill Of Materials (Ai Bom) Maintenance contributes AI-specific capability to the Supply Chain Risk Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0101", "gaissf_id": "D4-CTL-01", "gaissf_title": "AI BILL OF MATERIALS (AI BOM) MAINTENANCE", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D4-CTL-01 Ai Bill Of Materials (Ai Bom) Maintenance contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0102", "gaissf_id": "D4-CTL-01", "gaissf_title": "AI BILL OF MATERIALS (AI BOM) MAINTENANCE", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D4-CTL-01 Ai Bill Of Materials (Ai Bom) Maintenance contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0103", "gaissf_id": "D4-CTL-01", "gaissf_title": "AI BILL OF MATERIALS (AI BOM) MAINTENANCE", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "CM", "family_title": "Configuration Management", "family_summary": "Baselines, configuration settings, change control, inventories and least functionality.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D4-CTL-01 Ai Bill Of Materials (Ai Bom) Maintenance contributes AI-specific capability to the Configuration Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0104", "gaissf_id": "D4-CTL-02", "gaissf_title": "MODEL FILE & ARTIFACT SCANNING", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "SR", "family_title": "Supply Chain Risk Management", "family_summary": "Supply-chain plans, provenance, supplier assessments, component authenticity and acquisition risk.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D4-CTL-02 Model File & Artifact Scanning contributes AI-specific capability to the Supply Chain Risk Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0105", "gaissf_id": "D4-CTL-02", "gaissf_title": "MODEL FILE & ARTIFACT SCANNING", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D4-CTL-02 Model File & Artifact Scanning contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0106", "gaissf_id": "D4-CTL-02", "gaissf_title": "MODEL FILE & ARTIFACT SCANNING", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D4-CTL-02 Model File & Artifact Scanning contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0107", "gaissf_id": "D4-CTL-02", "gaissf_title": "MODEL FILE & ARTIFACT SCANNING", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "CM", "family_title": "Configuration Management", "family_summary": "Baselines, configuration settings, change control, inventories and least functionality.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D4-CTL-02 Model File & Artifact Scanning contributes AI-specific capability to the Configuration Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0108", "gaissf_id": "D4-CTL-02", "gaissf_title": "MODEL FILE & ARTIFACT SCANNING", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D4-CTL-02 Model File & Artifact Scanning contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0109", "gaissf_id": "D4-CTL-03", "gaissf_title": "MODEL HUB & REGISTRY VETTING", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "SR", "family_title": "Supply Chain Risk Management", "family_summary": "Supply-chain plans, provenance, supplier assessments, component authenticity and acquisition risk.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D4-CTL-03 Model Hub & Registry Vetting contributes AI-specific capability to the Supply Chain Risk Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0110", "gaissf_id": "D4-CTL-03", "gaissf_title": "MODEL HUB & REGISTRY VETTING", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D4-CTL-03 Model Hub & Registry Vetting contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0111", "gaissf_id": "D4-CTL-03", "gaissf_title": "MODEL HUB & REGISTRY VETTING", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D4-CTL-03 Model Hub & Registry Vetting contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0112", "gaissf_id": "D4-CTL-03", "gaissf_title": "MODEL HUB & REGISTRY VETTING", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "CM", "family_title": "Configuration Management", "family_summary": "Baselines, configuration settings, change control, inventories and least functionality.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D4-CTL-03 Model Hub & Registry Vetting contributes AI-specific capability to the Configuration Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0113", "gaissf_id": "D4-CTL-04", "gaissf_title": "MCP SERVER BEHAVIORAL MONITORING", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "SR", "family_title": "Supply Chain Risk Management", "family_summary": "Supply-chain plans, provenance, supplier assessments, component authenticity and acquisition risk.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D4-CTL-04 Mcp Server Behavioral Monitoring contributes AI-specific capability to the Supply Chain Risk Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0114", "gaissf_id": "D4-CTL-04", "gaissf_title": "MCP SERVER BEHAVIORAL MONITORING", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D4-CTL-04 Mcp Server Behavioral Monitoring contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0115", "gaissf_id": "D4-CTL-04", "gaissf_title": "MCP SERVER BEHAVIORAL MONITORING", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D4-CTL-04 Mcp Server Behavioral Monitoring contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0116", "gaissf_id": "D4-CTL-04", "gaissf_title": "MCP SERVER BEHAVIORAL MONITORING", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "CM", "family_title": "Configuration Management", "family_summary": "Baselines, configuration settings, change control, inventories and least functionality.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D4-CTL-04 Mcp Server Behavioral Monitoring contributes AI-specific capability to the Configuration Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0117", "gaissf_id": "D4-CTL-04", "gaissf_title": "MCP SERVER BEHAVIORAL MONITORING", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D4-CTL-04 Mcp Server Behavioral Monitoring contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0118", "gaissf_id": "D4-CTL-05", "gaissf_title": "THIRD-PARTY AI API SECURITY ASSESSMENT", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "SR", "family_title": "Supply Chain Risk Management", "family_summary": "Supply-chain plans, provenance, supplier assessments, component authenticity and acquisition risk.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D4-CTL-05 Third-Party Ai Api Security Assessment contributes AI-specific capability to the Supply Chain Risk Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0119", "gaissf_id": "D4-CTL-05", "gaissf_title": "THIRD-PARTY AI API SECURITY ASSESSMENT", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D4-CTL-05 Third-Party Ai Api Security Assessment contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0120", "gaissf_id": "D4-CTL-05", "gaissf_title": "THIRD-PARTY AI API SECURITY ASSESSMENT", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D4-CTL-05 Third-Party Ai Api Security Assessment contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0121", "gaissf_id": "D4-CTL-05", "gaissf_title": "THIRD-PARTY AI API SECURITY ASSESSMENT", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "CM", "family_title": "Configuration Management", "family_summary": "Baselines, configuration settings, change control, inventories and least functionality.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D4-CTL-05 Third-Party Ai Api Security Assessment contributes AI-specific capability to the Configuration Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0122", "gaissf_id": "D4-CTL-06", "gaissf_title": "SHADOW AI DISCOVERY & GOVERNANCE", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "SR", "family_title": "Supply Chain Risk Management", "family_summary": "Supply-chain plans, provenance, supplier assessments, component authenticity and acquisition risk.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D4-CTL-06 Shadow Ai Discovery & Governance contributes AI-specific capability to the Supply Chain Risk Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0123", "gaissf_id": "D4-CTL-06", "gaissf_title": "SHADOW AI DISCOVERY & GOVERNANCE", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D4-CTL-06 Shadow Ai Discovery & Governance contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0124", "gaissf_id": "D4-CTL-06", "gaissf_title": "SHADOW AI DISCOVERY & GOVERNANCE", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D4-CTL-06 Shadow Ai Discovery & Governance contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0125", "gaissf_id": "D4-CTL-06", "gaissf_title": "SHADOW AI DISCOVERY & GOVERNANCE", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "CM", "family_title": "Configuration Management", "family_summary": "Baselines, configuration settings, change control, inventories and least functionality.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D4-CTL-06 Shadow Ai Discovery & Governance contributes AI-specific capability to the Configuration Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0126", "gaissf_id": "D4-CTL-07", "gaissf_title": "AI SOFTWARE COMPOSITION ANALYSIS (SCA)", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "SR", "family_title": "Supply Chain Risk Management", "family_summary": "Supply-chain plans, provenance, supplier assessments, component authenticity and acquisition risk.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D4-CTL-07 Ai Software Composition Analysis (Sca) contributes AI-specific capability to the Supply Chain Risk Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0127", "gaissf_id": "D4-CTL-07", "gaissf_title": "AI SOFTWARE COMPOSITION ANALYSIS (SCA)", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D4-CTL-07 Ai Software Composition Analysis (Sca) contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0128", "gaissf_id": "D4-CTL-07", "gaissf_title": "AI SOFTWARE COMPOSITION ANALYSIS (SCA)", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D4-CTL-07 Ai Software Composition Analysis (Sca) contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0129", "gaissf_id": "D4-CTL-07", "gaissf_title": "AI SOFTWARE COMPOSITION ANALYSIS (SCA)", "gaissf_domain": "D4: SUPPLY CHAIN & THIRD-PARTY AI SECURITY", "fedramp_family": "CM", "family_title": "Configuration Management", "family_summary": "Baselines, configuration settings, change control, inventories and least functionality.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D4-CTL-07 Ai Software Composition Analysis (Sca) contributes AI-specific capability to the Configuration Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0130", "gaissf_id": "D5-CTL-01", "gaissf_title": "HARMFUL CONTENT BLOCKING", "gaissf_domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D5-CTL-01 Harmful Content Blocking contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0131", "gaissf_id": "D5-CTL-01", "gaissf_title": "HARMFUL CONTENT BLOCKING", "gaissf_domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "fedramp_family": "PT", "family_title": "Personally Identifiable Information Processing and Transparency", "family_summary": "Privacy authority, purpose, minimization, consent, notices, rights and data quality.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D5-CTL-01 Harmful Content Blocking contributes AI-specific capability to the Personally Identifiable Information Processing and Transparency outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0132", "gaissf_id": "D5-CTL-01", "gaissf_title": "HARMFUL CONTENT BLOCKING", "gaissf_domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "fedramp_family": "SC", "family_title": "System and Communications Protection", "family_summary": "Boundary protection, cryptography, architecture, transmission security, isolation and denial-of-service protection.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D5-CTL-01 Harmful Content Blocking contributes AI-specific capability to the System and Communications Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0133", "gaissf_id": "D5-CTL-02", "gaissf_title": "PII LEAKAGE PREVENTION", "gaissf_domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D5-CTL-02 Pii Leakage Prevention contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0134", "gaissf_id": "D5-CTL-02", "gaissf_title": "PII LEAKAGE PREVENTION", "gaissf_domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "fedramp_family": "PT", "family_title": "Personally Identifiable Information Processing and Transparency", "family_summary": "Privacy authority, purpose, minimization, consent, notices, rights and data quality.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D5-CTL-02 Pii Leakage Prevention contributes AI-specific capability to the Personally Identifiable Information Processing and Transparency outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0135", "gaissf_id": "D5-CTL-02", "gaissf_title": "PII LEAKAGE PREVENTION", "gaissf_domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "fedramp_family": "SC", "family_title": "System and Communications Protection", "family_summary": "Boundary protection, cryptography, architecture, transmission security, isolation and denial-of-service protection.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D5-CTL-02 Pii Leakage Prevention contributes AI-specific capability to the System and Communications Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0136", "gaissf_id": "D5-CTL-03", "gaissf_title": "COPYRIGHT DETECTION", "gaissf_domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D5-CTL-03 Copyright Detection contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0137", "gaissf_id": "D5-CTL-03", "gaissf_title": "COPYRIGHT DETECTION", "gaissf_domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "fedramp_family": "PT", "family_title": "Personally Identifiable Information Processing and Transparency", "family_summary": "Privacy authority, purpose, minimization, consent, notices, rights and data quality.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D5-CTL-03 Copyright Detection contributes AI-specific capability to the Personally Identifiable Information Processing and Transparency outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0138", "gaissf_id": "D5-CTL-03", "gaissf_title": "COPYRIGHT DETECTION", "gaissf_domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "fedramp_family": "SC", "family_title": "System and Communications Protection", "family_summary": "Boundary protection, cryptography, architecture, transmission security, isolation and denial-of-service protection.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D5-CTL-03 Copyright Detection contributes AI-specific capability to the System and Communications Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0139", "gaissf_id": "D5-CTL-03", "gaissf_title": "COPYRIGHT DETECTION", "gaissf_domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D5-CTL-03 Copyright Detection contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0140", "gaissf_id": "D5-CTL-04", "gaissf_title": "AI WATERMARKING ROBUSTNESS", "gaissf_domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D5-CTL-04 Ai Watermarking Robustness contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0141", "gaissf_id": "D5-CTL-04", "gaissf_title": "AI WATERMARKING ROBUSTNESS", "gaissf_domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "fedramp_family": "PT", "family_title": "Personally Identifiable Information Processing and Transparency", "family_summary": "Privacy authority, purpose, minimization, consent, notices, rights and data quality.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D5-CTL-04 Ai Watermarking Robustness contributes AI-specific capability to the Personally Identifiable Information Processing and Transparency outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0142", "gaissf_id": "D5-CTL-04", "gaissf_title": "AI WATERMARKING ROBUSTNESS", "gaissf_domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "fedramp_family": "SC", "family_title": "System and Communications Protection", "family_summary": "Boundary protection, cryptography, architecture, transmission security, isolation and denial-of-service protection.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D5-CTL-04 Ai Watermarking Robustness contributes AI-specific capability to the System and Communications Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0143", "gaissf_id": "D5-CTL-05", "gaissf_title": "PRIVACY-BY-DESIGN VERIFICATION", "gaissf_domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D5-CTL-05 Privacy-By-Design Verification contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0144", "gaissf_id": "D5-CTL-05", "gaissf_title": "PRIVACY-BY-DESIGN VERIFICATION", "gaissf_domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "fedramp_family": "PT", "family_title": "Personally Identifiable Information Processing and Transparency", "family_summary": "Privacy authority, purpose, minimization, consent, notices, rights and data quality.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D5-CTL-05 Privacy-By-Design Verification contributes AI-specific capability to the Personally Identifiable Information Processing and Transparency outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0145", "gaissf_id": "D5-CTL-05", "gaissf_title": "PRIVACY-BY-DESIGN VERIFICATION", "gaissf_domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "fedramp_family": "SC", "family_title": "System and Communications Protection", "family_summary": "Boundary protection, cryptography, architecture, transmission security, isolation and denial-of-service protection.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D5-CTL-05 Privacy-By-Design Verification contributes AI-specific capability to the System and Communications Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0146", "gaissf_id": "D5-CTL-06", "gaissf_title": "PRIVACY-PRESERVING ML VALIDATION", "gaissf_domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D5-CTL-06 Privacy-Preserving Ml Validation contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0147", "gaissf_id": "D5-CTL-06", "gaissf_title": "PRIVACY-PRESERVING ML VALIDATION", "gaissf_domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "fedramp_family": "PT", "family_title": "Personally Identifiable Information Processing and Transparency", "family_summary": "Privacy authority, purpose, minimization, consent, notices, rights and data quality.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D5-CTL-06 Privacy-Preserving Ml Validation contributes AI-specific capability to the Personally Identifiable Information Processing and Transparency outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0148", "gaissf_id": "D5-CTL-06", "gaissf_title": "PRIVACY-PRESERVING ML VALIDATION", "gaissf_domain": "D5: CONTENT SAFETY & OUTPUT INTEGRITY", "fedramp_family": "SC", "family_title": "System and Communications Protection", "family_summary": "Boundary protection, cryptography, architecture, transmission security, isolation and denial-of-service protection.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D5-CTL-06 Privacy-Preserving Ml Validation contributes AI-specific capability to the System and Communications Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0149", "gaissf_id": "D6-CTL-01", "gaissf_title": "HUMAN-IN-THE-LOOP FOR HIGH-RISK ACTIONS", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "PM", "family_title": "Program Management", "family_summary": "Enterprise security and privacy governance, risk strategy, resources, inventories and program oversight.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D6-CTL-01 Human-In-The-Loop For High-Risk Actions contributes AI-specific capability to the Program Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0150", "gaissf_id": "D6-CTL-01", "gaissf_title": "HUMAN-IN-THE-LOOP FOR HIGH-RISK ACTIONS", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "PL", "family_title": "Planning", "family_summary": "System security planning, rules of behavior, architecture and privacy planning.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D6-CTL-01 Human-In-The-Loop For High-Risk Actions contributes AI-specific capability to the Planning outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0151", "gaissf_id": "D6-CTL-01", "gaissf_title": "HUMAN-IN-THE-LOOP FOR HIGH-RISK ACTIONS", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "CA", "family_title": "Assessment, Authorization and Monitoring", "family_summary": "Control assessment, authorization decisions, continuous monitoring, plans of action and milestones.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D6-CTL-01 Human-In-The-Loop For High-Risk Actions contributes AI-specific capability to the Assessment, Authorization and Monitoring outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0152", "gaissf_id": "D6-CTL-01", "gaissf_title": "HUMAN-IN-THE-LOOP FOR HIGH-RISK ACTIONS", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "AU", "family_title": "Audit and Accountability", "family_summary": "Event logging, audit record content, review, retention, protection and accountability.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D6-CTL-01 Human-In-The-Loop For High-Risk Actions contributes AI-specific capability to the Audit and Accountability outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0153", "gaissf_id": "D6-CTL-02", "gaissf_title": "AUDIT TRAIL COMPLETENESS", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "PM", "family_title": "Program Management", "family_summary": "Enterprise security and privacy governance, risk strategy, resources, inventories and program oversight.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D6-CTL-02 Audit Trail Completeness contributes AI-specific capability to the Program Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0154", "gaissf_id": "D6-CTL-02", "gaissf_title": "AUDIT TRAIL COMPLETENESS", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "PL", "family_title": "Planning", "family_summary": "System security planning, rules of behavior, architecture and privacy planning.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D6-CTL-02 Audit Trail Completeness contributes AI-specific capability to the Planning outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0155", "gaissf_id": "D6-CTL-02", "gaissf_title": "AUDIT TRAIL COMPLETENESS", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "CA", "family_title": "Assessment, Authorization and Monitoring", "family_summary": "Control assessment, authorization decisions, continuous monitoring, plans of action and milestones.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D6-CTL-02 Audit Trail Completeness contributes AI-specific capability to the Assessment, Authorization and Monitoring outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0156", "gaissf_id": "D6-CTL-02", "gaissf_title": "AUDIT TRAIL COMPLETENESS", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "AU", "family_title": "Audit and Accountability", "family_summary": "Event logging, audit record content, review, retention, protection and accountability.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D6-CTL-02 Audit Trail Completeness contributes AI-specific capability to the Audit and Accountability outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0157", "gaissf_id": "D6-CTL-03", "gaissf_title": "AI MODEL CARD COMPLETENESS", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "PM", "family_title": "Program Management", "family_summary": "Enterprise security and privacy governance, risk strategy, resources, inventories and program oversight.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D6-CTL-03 Ai Model Card Completeness contributes AI-specific capability to the Program Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0158", "gaissf_id": "D6-CTL-03", "gaissf_title": "AI MODEL CARD COMPLETENESS", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "PL", "family_title": "Planning", "family_summary": "System security planning, rules of behavior, architecture and privacy planning.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D6-CTL-03 Ai Model Card Completeness contributes AI-specific capability to the Planning outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0159", "gaissf_id": "D6-CTL-03", "gaissf_title": "AI MODEL CARD COMPLETENESS", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "CA", "family_title": "Assessment, Authorization and Monitoring", "family_summary": "Control assessment, authorization decisions, continuous monitoring, plans of action and milestones.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D6-CTL-03 Ai Model Card Completeness contributes AI-specific capability to the Assessment, Authorization and Monitoring outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0160", "gaissf_id": "D6-CTL-03", "gaissf_title": "AI MODEL CARD COMPLETENESS", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "AU", "family_title": "Audit and Accountability", "family_summary": "Event logging, audit record content, review, retention, protection and accountability.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D6-CTL-03 Ai Model Card Completeness contributes AI-specific capability to the Audit and Accountability outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0161", "gaissf_id": "D6-CTL-04", "gaissf_title": "AI INCIDENT RESPONSE READINESS", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "PM", "family_title": "Program Management", "family_summary": "Enterprise security and privacy governance, risk strategy, resources, inventories and program oversight.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D6-CTL-04 Ai Incident Response Readiness contributes AI-specific capability to the Program Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0162", "gaissf_id": "D6-CTL-04", "gaissf_title": "AI INCIDENT RESPONSE READINESS", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "PL", "family_title": "Planning", "family_summary": "System security planning, rules of behavior, architecture and privacy planning.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D6-CTL-04 Ai Incident Response Readiness contributes AI-specific capability to the Planning outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0163", "gaissf_id": "D6-CTL-04", "gaissf_title": "AI INCIDENT RESPONSE READINESS", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "CA", "family_title": "Assessment, Authorization and Monitoring", "family_summary": "Control assessment, authorization decisions, continuous monitoring, plans of action and milestones.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D6-CTL-04 Ai Incident Response Readiness contributes AI-specific capability to the Assessment, Authorization and Monitoring outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0164", "gaissf_id": "D6-CTL-04", "gaissf_title": "AI INCIDENT RESPONSE READINESS", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "AU", "family_title": "Audit and Accountability", "family_summary": "Event logging, audit record content, review, retention, protection and accountability.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D6-CTL-04 Ai Incident Response Readiness contributes AI-specific capability to the Audit and Accountability outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0165", "gaissf_id": "D6-CTL-04", "gaissf_title": "AI INCIDENT RESPONSE READINESS", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "IR", "family_title": "Incident Response", "family_summary": "Preparation, detection, analysis, containment, recovery, reporting and incident handling.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D6-CTL-04 Ai Incident Response Readiness contributes AI-specific capability to the Incident Response outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0166", "gaissf_id": "D6-CTL-05", "gaissf_title": "MODEL DEPRECATION & DECOMMISSIONING", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "PM", "family_title": "Program Management", "family_summary": "Enterprise security and privacy governance, risk strategy, resources, inventories and program oversight.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D6-CTL-05 Model Deprecation & Decommissioning contributes AI-specific capability to the Program Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0167", "gaissf_id": "D6-CTL-05", "gaissf_title": "MODEL DEPRECATION & DECOMMISSIONING", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "PL", "family_title": "Planning", "family_summary": "System security planning, rules of behavior, architecture and privacy planning.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D6-CTL-05 Model Deprecation & Decommissioning contributes AI-specific capability to the Planning outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0168", "gaissf_id": "D6-CTL-05", "gaissf_title": "MODEL DEPRECATION & DECOMMISSIONING", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "CA", "family_title": "Assessment, Authorization and Monitoring", "family_summary": "Control assessment, authorization decisions, continuous monitoring, plans of action and milestones.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D6-CTL-05 Model Deprecation & Decommissioning contributes AI-specific capability to the Assessment, Authorization and Monitoring outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0169", "gaissf_id": "D6-CTL-05", "gaissf_title": "MODEL DEPRECATION & DECOMMISSIONING", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "AU", "family_title": "Audit and Accountability", "family_summary": "Event logging, audit record content, review, retention, protection and accountability.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D6-CTL-05 Model Deprecation & Decommissioning contributes AI-specific capability to the Audit and Accountability outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0170", "gaissf_id": "D6-CTL-05", "gaissf_title": "MODEL DEPRECATION & DECOMMISSIONING", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "CM", "family_title": "Configuration Management", "family_summary": "Baselines, configuration settings, change control, inventories and least functionality.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D6-CTL-05 Model Deprecation & Decommissioning contributes AI-specific capability to the Configuration Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0171", "gaissf_id": "D6-CTL-05", "gaissf_title": "MODEL DEPRECATION & DECOMMISSIONING", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "MP", "family_title": "Media Protection", "family_summary": "Media access, marking, storage, transport, sanitization and use.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D6-CTL-05 Model Deprecation & Decommissioning contributes AI-specific capability to the Media Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0172", "gaissf_id": "D6-CTL-06", "gaissf_title": "THIRD-PARTY AI VENDOR GOVERNANCE", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "PM", "family_title": "Program Management", "family_summary": "Enterprise security and privacy governance, risk strategy, resources, inventories and program oversight.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D6-CTL-06 Third-Party Ai Vendor Governance contributes AI-specific capability to the Program Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0173", "gaissf_id": "D6-CTL-06", "gaissf_title": "THIRD-PARTY AI VENDOR GOVERNANCE", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "PL", "family_title": "Planning", "family_summary": "System security planning, rules of behavior, architecture and privacy planning.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D6-CTL-06 Third-Party Ai Vendor Governance contributes AI-specific capability to the Planning outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0174", "gaissf_id": "D6-CTL-06", "gaissf_title": "THIRD-PARTY AI VENDOR GOVERNANCE", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "CA", "family_title": "Assessment, Authorization and Monitoring", "family_summary": "Control assessment, authorization decisions, continuous monitoring, plans of action and milestones.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D6-CTL-06 Third-Party Ai Vendor Governance contributes AI-specific capability to the Assessment, Authorization and Monitoring outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0175", "gaissf_id": "D6-CTL-06", "gaissf_title": "THIRD-PARTY AI VENDOR GOVERNANCE", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "AU", "family_title": "Audit and Accountability", "family_summary": "Event logging, audit record content, review, retention, protection and accountability.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D6-CTL-06 Third-Party Ai Vendor Governance contributes AI-specific capability to the Audit and Accountability outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0176", "gaissf_id": "D6-CTL-06", "gaissf_title": "THIRD-PARTY AI VENDOR GOVERNANCE", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "SR", "family_title": "Supply Chain Risk Management", "family_summary": "Supply-chain plans, provenance, supplier assessments, component authenticity and acquisition risk.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D6-CTL-06 Third-Party Ai Vendor Governance contributes AI-specific capability to the Supply Chain Risk Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0177", "gaissf_id": "D6-CTL-06", "gaissf_title": "THIRD-PARTY AI VENDOR GOVERNANCE", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D6-CTL-06 Third-Party Ai Vendor Governance contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0178", "gaissf_id": "D6-CTL-07", "gaissf_title": "AI RESILIENCE & BUSINESS CONTINUITY", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "PM", "family_title": "Program Management", "family_summary": "Enterprise security and privacy governance, risk strategy, resources, inventories and program oversight.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D6-CTL-07 Ai Resilience & Business Continuity contributes AI-specific capability to the Program Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0179", "gaissf_id": "D6-CTL-07", "gaissf_title": "AI RESILIENCE & BUSINESS CONTINUITY", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "PL", "family_title": "Planning", "family_summary": "System security planning, rules of behavior, architecture and privacy planning.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D6-CTL-07 Ai Resilience & Business Continuity contributes AI-specific capability to the Planning outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0180", "gaissf_id": "D6-CTL-07", "gaissf_title": "AI RESILIENCE & BUSINESS CONTINUITY", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "CA", "family_title": "Assessment, Authorization and Monitoring", "family_summary": "Control assessment, authorization decisions, continuous monitoring, plans of action and milestones.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D6-CTL-07 Ai Resilience & Business Continuity contributes AI-specific capability to the Assessment, Authorization and Monitoring outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0181", "gaissf_id": "D6-CTL-07", "gaissf_title": "AI RESILIENCE & BUSINESS CONTINUITY", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "AU", "family_title": "Audit and Accountability", "family_summary": "Event logging, audit record content, review, retention, protection and accountability.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D6-CTL-07 Ai Resilience & Business Continuity contributes AI-specific capability to the Audit and Accountability outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0182", "gaissf_id": "D6-CTL-07", "gaissf_title": "AI RESILIENCE & BUSINESS CONTINUITY", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "CP", "family_title": "Contingency Planning", "family_summary": "Business continuity, backups, recovery, alternate processing and contingency testing.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D6-CTL-07 Ai Resilience & Business Continuity contributes AI-specific capability to the Contingency Planning outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0183", "gaissf_id": "D6-CTL-07", "gaissf_title": "AI RESILIENCE & BUSINESS CONTINUITY", "gaissf_domain": "D6: GOVERNANCE, ACCOUNTABILITY & HUMAN OVERSIGHT", "fedramp_family": "IR", "family_title": "Incident Response", "family_summary": "Preparation, detection, analysis, containment, recovery, reporting and incident handling.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D6-CTL-07 Ai Resilience & Business Continuity contributes AI-specific capability to the Incident Response outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0184", "gaissf_id": "D7-CTL-H01", "gaissf_title": "AI-GENERATED PHISHING SIMULATION", "gaissf_domain": "D7: HUMAN & SOCIETAL HARMS", "fedramp_family": "AT", "family_title": "Awareness and Training", "family_summary": "Security literacy, role-based training, social engineering awareness and training records.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D7-CTL-H01 Ai-Generated Phishing Simulation contributes AI-specific capability to the Awareness and Training outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0185", "gaissf_id": "D7-CTL-H01", "gaissf_title": "AI-GENERATED PHISHING SIMULATION", "gaissf_domain": "D7: HUMAN & SOCIETAL HARMS", "fedramp_family": "IR", "family_title": "Incident Response", "family_summary": "Preparation, detection, analysis, containment, recovery, reporting and incident handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D7-CTL-H01 Ai-Generated Phishing Simulation contributes AI-specific capability to the Incident Response outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0186", "gaissf_id": "D7-CTL-H01", "gaissf_title": "AI-GENERATED PHISHING SIMULATION", "gaissf_domain": "D7: HUMAN & SOCIETAL HARMS", "fedramp_family": "IA", "family_title": "Identification and Authentication", "family_summary": "Identity proofing, multifactor authentication, authenticator management and service identification.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D7-CTL-H01 Ai-Generated Phishing Simulation contributes AI-specific capability to the Identification and Authentication outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0187", "gaissf_id": "D7-CTL-H01", "gaissf_title": "AI-GENERATED PHISHING SIMULATION", "gaissf_domain": "D7: HUMAN & SOCIETAL HARMS", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D7-CTL-H01 Ai-Generated Phishing Simulation contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0188", "gaissf_id": "D7-CTL-H02", "gaissf_title": "DEEPFAKE DETECTION TRAINING", "gaissf_domain": "D7: HUMAN & SOCIETAL HARMS", "fedramp_family": "AT", "family_title": "Awareness and Training", "family_summary": "Security literacy, role-based training, social engineering awareness and training records.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D7-CTL-H02 Deepfake Detection Training contributes AI-specific capability to the Awareness and Training outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0189", "gaissf_id": "D7-CTL-H02", "gaissf_title": "DEEPFAKE DETECTION TRAINING", "gaissf_domain": "D7: HUMAN & SOCIETAL HARMS", "fedramp_family": "IR", "family_title": "Incident Response", "family_summary": "Preparation, detection, analysis, containment, recovery, reporting and incident handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D7-CTL-H02 Deepfake Detection Training contributes AI-specific capability to the Incident Response outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0190", "gaissf_id": "D7-CTL-H02", "gaissf_title": "DEEPFAKE DETECTION TRAINING", "gaissf_domain": "D7: HUMAN & SOCIETAL HARMS", "fedramp_family": "IA", "family_title": "Identification and Authentication", "family_summary": "Identity proofing, multifactor authentication, authenticator management and service identification.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D7-CTL-H02 Deepfake Detection Training contributes AI-specific capability to the Identification and Authentication outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0191", "gaissf_id": "D7-CTL-H02", "gaissf_title": "DEEPFAKE DETECTION TRAINING", "gaissf_domain": "D7: HUMAN & SOCIETAL HARMS", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D7-CTL-H02 Deepfake Detection Training contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0192", "gaissf_id": "D7-CTL-H02", "gaissf_title": "DEEPFAKE DETECTION TRAINING", "gaissf_domain": "D7: HUMAN & SOCIETAL HARMS", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D7-CTL-H02 Deepfake Detection Training contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0193", "gaissf_id": "D7-CTL-H03", "gaissf_title": "OUT-OF-BAND AUTHENTICATION", "gaissf_domain": "D7: HUMAN & SOCIETAL HARMS", "fedramp_family": "AT", "family_title": "Awareness and Training", "family_summary": "Security literacy, role-based training, social engineering awareness and training records.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D7-CTL-H03 Out-Of-Band Authentication contributes AI-specific capability to the Awareness and Training outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0194", "gaissf_id": "D7-CTL-H03", "gaissf_title": "OUT-OF-BAND AUTHENTICATION", "gaissf_domain": "D7: HUMAN & SOCIETAL HARMS", "fedramp_family": "IR", "family_title": "Incident Response", "family_summary": "Preparation, detection, analysis, containment, recovery, reporting and incident handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D7-CTL-H03 Out-Of-Band Authentication contributes AI-specific capability to the Incident Response outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0195", "gaissf_id": "D7-CTL-H03", "gaissf_title": "OUT-OF-BAND AUTHENTICATION", "gaissf_domain": "D7: HUMAN & SOCIETAL HARMS", "fedramp_family": "IA", "family_title": "Identification and Authentication", "family_summary": "Identity proofing, multifactor authentication, authenticator management and service identification.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D7-CTL-H03 Out-Of-Band Authentication contributes AI-specific capability to the Identification and Authentication outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0196", "gaissf_id": "D7-CTL-H03", "gaissf_title": "OUT-OF-BAND AUTHENTICATION", "gaissf_domain": "D7: HUMAN & SOCIETAL HARMS", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D7-CTL-H03 Out-Of-Band Authentication contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0197", "gaissf_id": "D7-CTL-H03", "gaissf_title": "OUT-OF-BAND AUTHENTICATION", "gaissf_domain": "D7: HUMAN & SOCIETAL HARMS", "fedramp_family": "AC", "family_title": "Access Control", "family_summary": "Account and privilege management, access enforcement, separation of duties, least privilege, remote access and information flow.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D7-CTL-H03 Out-Of-Band Authentication contributes AI-specific capability to the Access Control outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0198", "gaissf_id": "D7-CTL-H04", "gaissf_title": "AI SOCIAL ENGINEERING IR", "gaissf_domain": "D7: HUMAN & SOCIETAL HARMS", "fedramp_family": "AT", "family_title": "Awareness and Training", "family_summary": "Security literacy, role-based training, social engineering awareness and training records.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D7-CTL-H04 Ai Social Engineering Ir contributes AI-specific capability to the Awareness and Training outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0199", "gaissf_id": "D7-CTL-H04", "gaissf_title": "AI SOCIAL ENGINEERING IR", "gaissf_domain": "D7: HUMAN & SOCIETAL HARMS", "fedramp_family": "IR", "family_title": "Incident Response", "family_summary": "Preparation, detection, analysis, containment, recovery, reporting and incident handling.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D7-CTL-H04 Ai Social Engineering Ir contributes AI-specific capability to the Incident Response outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0200", "gaissf_id": "D7-CTL-H04", "gaissf_title": "AI SOCIAL ENGINEERING IR", "gaissf_domain": "D7: HUMAN & SOCIETAL HARMS", "fedramp_family": "IA", "family_title": "Identification and Authentication", "family_summary": "Identity proofing, multifactor authentication, authenticator management and service identification.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D7-CTL-H04 Ai Social Engineering Ir contributes AI-specific capability to the Identification and Authentication outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0201", "gaissf_id": "D7-CTL-H04", "gaissf_title": "AI SOCIAL ENGINEERING IR", "gaissf_domain": "D7: HUMAN & SOCIETAL HARMS", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D7-CTL-H04 Ai Social Engineering Ir contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0202", "gaissf_id": "D7-CTL-H05", "gaissf_title": "AI-ENHANCED EXTERNAL ATTACK DEFENSE", "gaissf_domain": "D7: HUMAN & SOCIETAL HARMS", "fedramp_family": "AT", "family_title": "Awareness and Training", "family_summary": "Security literacy, role-based training, social engineering awareness and training records.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D7-CTL-H05 Ai-Enhanced External Attack Defense contributes AI-specific capability to the Awareness and Training outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0203", "gaissf_id": "D7-CTL-H05", "gaissf_title": "AI-ENHANCED EXTERNAL ATTACK DEFENSE", "gaissf_domain": "D7: HUMAN & SOCIETAL HARMS", "fedramp_family": "IR", "family_title": "Incident Response", "family_summary": "Preparation, detection, analysis, containment, recovery, reporting and incident handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D7-CTL-H05 Ai-Enhanced External Attack Defense contributes AI-specific capability to the Incident Response outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0204", "gaissf_id": "D7-CTL-H05", "gaissf_title": "AI-ENHANCED EXTERNAL ATTACK DEFENSE", "gaissf_domain": "D7: HUMAN & SOCIETAL HARMS", "fedramp_family": "IA", "family_title": "Identification and Authentication", "family_summary": "Identity proofing, multifactor authentication, authenticator management and service identification.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D7-CTL-H05 Ai-Enhanced External Attack Defense contributes AI-specific capability to the Identification and Authentication outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0205", "gaissf_id": "D7-CTL-H05", "gaissf_title": "AI-ENHANCED EXTERNAL ATTACK DEFENSE", "gaissf_domain": "D7: HUMAN & SOCIETAL HARMS", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D7-CTL-H05 Ai-Enhanced External Attack Defense contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0206", "gaissf_id": "D8-CTL-01", "gaissf_title": "EU AI ACT RISK TIER MAPPING", "gaissf_domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "fedramp_family": "PM", "family_title": "Program Management", "family_summary": "Enterprise security and privacy governance, risk strategy, resources, inventories and program oversight.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D8-CTL-01 Eu Ai Act Risk Tier Mapping contributes AI-specific capability to the Program Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0207", "gaissf_id": "D8-CTL-01", "gaissf_title": "EU AI ACT RISK TIER MAPPING", "gaissf_domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "fedramp_family": "PL", "family_title": "Planning", "family_summary": "System security planning, rules of behavior, architecture and privacy planning.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D8-CTL-01 Eu Ai Act Risk Tier Mapping contributes AI-specific capability to the Planning outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0208", "gaissf_id": "D8-CTL-01", "gaissf_title": "EU AI ACT RISK TIER MAPPING", "gaissf_domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "fedramp_family": "CA", "family_title": "Assessment, Authorization and Monitoring", "family_summary": "Control assessment, authorization decisions, continuous monitoring, plans of action and milestones.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D8-CTL-01 Eu Ai Act Risk Tier Mapping contributes AI-specific capability to the Assessment, Authorization and Monitoring outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0209", "gaissf_id": "D8-CTL-02", "gaissf_title": "ISO 42001 GAP ANALYSIS", "gaissf_domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "fedramp_family": "PM", "family_title": "Program Management", "family_summary": "Enterprise security and privacy governance, risk strategy, resources, inventories and program oversight.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D8-CTL-02 Iso 42001 Gap Analysis contributes AI-specific capability to the Program Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0210", "gaissf_id": "D8-CTL-02", "gaissf_title": "ISO 42001 GAP ANALYSIS", "gaissf_domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "fedramp_family": "PL", "family_title": "Planning", "family_summary": "System security planning, rules of behavior, architecture and privacy planning.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D8-CTL-02 Iso 42001 Gap Analysis contributes AI-specific capability to the Planning outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0211", "gaissf_id": "D8-CTL-02", "gaissf_title": "ISO 42001 GAP ANALYSIS", "gaissf_domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "fedramp_family": "CA", "family_title": "Assessment, Authorization and Monitoring", "family_summary": "Control assessment, authorization decisions, continuous monitoring, plans of action and milestones.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D8-CTL-02 Iso 42001 Gap Analysis contributes AI-specific capability to the Assessment, Authorization and Monitoring outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0212", "gaissf_id": "D8-CTL-03", "gaissf_title": "GPAI TECHNICAL DOCUMENTATION VERIFICATION", "gaissf_domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "fedramp_family": "PM", "family_title": "Program Management", "family_summary": "Enterprise security and privacy governance, risk strategy, resources, inventories and program oversight.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D8-CTL-03 Gpai Technical Documentation Verification contributes AI-specific capability to the Program Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0213", "gaissf_id": "D8-CTL-03", "gaissf_title": "GPAI TECHNICAL DOCUMENTATION VERIFICATION", "gaissf_domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "fedramp_family": "PL", "family_title": "Planning", "family_summary": "System security planning, rules of behavior, architecture and privacy planning.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D8-CTL-03 Gpai Technical Documentation Verification contributes AI-specific capability to the Planning outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0214", "gaissf_id": "D8-CTL-03", "gaissf_title": "GPAI TECHNICAL DOCUMENTATION VERIFICATION", "gaissf_domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "fedramp_family": "CA", "family_title": "Assessment, Authorization and Monitoring", "family_summary": "Control assessment, authorization decisions, continuous monitoring, plans of action and milestones.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D8-CTL-03 Gpai Technical Documentation Verification contributes AI-specific capability to the Assessment, Authorization and Monitoring outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0215", "gaissf_id": "D8-CTL-04", "gaissf_title": "DORA ICT INCIDENT REPORTING (FINANCIAL SECTOR)", "gaissf_domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "fedramp_family": "PM", "family_title": "Program Management", "family_summary": "Enterprise security and privacy governance, risk strategy, resources, inventories and program oversight.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D8-CTL-04 Dora Ict Incident Reporting (Financial Sector) contributes AI-specific capability to the Program Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0216", "gaissf_id": "D8-CTL-04", "gaissf_title": "DORA ICT INCIDENT REPORTING (FINANCIAL SECTOR)", "gaissf_domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "fedramp_family": "PL", "family_title": "Planning", "family_summary": "System security planning, rules of behavior, architecture and privacy planning.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D8-CTL-04 Dora Ict Incident Reporting (Financial Sector) contributes AI-specific capability to the Planning outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0217", "gaissf_id": "D8-CTL-04", "gaissf_title": "DORA ICT INCIDENT REPORTING (FINANCIAL SECTOR)", "gaissf_domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "fedramp_family": "CA", "family_title": "Assessment, Authorization and Monitoring", "family_summary": "Control assessment, authorization decisions, continuous monitoring, plans of action and milestones.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D8-CTL-04 Dora Ict Incident Reporting (Financial Sector) contributes AI-specific capability to the Assessment, Authorization and Monitoring outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0218", "gaissf_id": "D8-CTL-04", "gaissf_title": "DORA ICT INCIDENT REPORTING (FINANCIAL SECTOR)", "gaissf_domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "fedramp_family": "IR", "family_title": "Incident Response", "family_summary": "Preparation, detection, analysis, containment, recovery, reporting and incident handling.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D8-CTL-04 Dora Ict Incident Reporting (Financial Sector) contributes AI-specific capability to the Incident Response outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0219", "gaissf_id": "D8-CTL-04", "gaissf_title": "DORA ICT INCIDENT REPORTING (FINANCIAL SECTOR)", "gaissf_domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "fedramp_family": "AU", "family_title": "Audit and Accountability", "family_summary": "Event logging, audit record content, review, retention, protection and accountability.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D8-CTL-04 Dora Ict Incident Reporting (Financial Sector) contributes AI-specific capability to the Audit and Accountability outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0220", "gaissf_id": "D8-CTL-04", "gaissf_title": "DORA ICT INCIDENT REPORTING (FINANCIAL SECTOR)", "gaissf_domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "fedramp_family": "CP", "family_title": "Contingency Planning", "family_summary": "Business continuity, backups, recovery, alternate processing and contingency testing.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D8-CTL-04 Dora Ict Incident Reporting (Financial Sector) contributes AI-specific capability to the Contingency Planning outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0221", "gaissf_id": "D8-CTL-05", "gaissf_title": "NIST SP 800-218A COMPLIANCE CHECK", "gaissf_domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "fedramp_family": "PM", "family_title": "Program Management", "family_summary": "Enterprise security and privacy governance, risk strategy, resources, inventories and program oversight.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D8-CTL-05 Nist Sp 800-218A Compliance Check contributes AI-specific capability to the Program Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0222", "gaissf_id": "D8-CTL-05", "gaissf_title": "NIST SP 800-218A COMPLIANCE CHECK", "gaissf_domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "fedramp_family": "PL", "family_title": "Planning", "family_summary": "System security planning, rules of behavior, architecture and privacy planning.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D8-CTL-05 Nist Sp 800-218A Compliance Check contributes AI-specific capability to the Planning outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0223", "gaissf_id": "D8-CTL-05", "gaissf_title": "NIST SP 800-218A COMPLIANCE CHECK", "gaissf_domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "fedramp_family": "CA", "family_title": "Assessment, Authorization and Monitoring", "family_summary": "Control assessment, authorization decisions, continuous monitoring, plans of action and milestones.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D8-CTL-05 Nist Sp 800-218A Compliance Check contributes AI-specific capability to the Assessment, Authorization and Monitoring outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0224", "gaissf_id": "D8-CTL-05", "gaissf_title": "NIST SP 800-218A COMPLIANCE CHECK", "gaissf_domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "fedramp_family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D8-CTL-05 Nist Sp 800-218A Compliance Check contributes AI-specific capability to the System and Services Acquisition outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0225", "gaissf_id": "D8-CTL-05", "gaissf_title": "NIST SP 800-218A COMPLIANCE CHECK", "gaissf_domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "fedramp_family": "CM", "family_title": "Configuration Management", "family_summary": "Baselines, configuration settings, change control, inventories and least functionality.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D8-CTL-05 Nist Sp 800-218A Compliance Check contributes AI-specific capability to the Configuration Management outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0226", "gaissf_id": "D8-CTL-05", "gaissf_title": "NIST SP 800-218A COMPLIANCE CHECK", "gaissf_domain": "D8: REGULATORY ALIGNMENT & COMPLIANCE", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D8-CTL-05 Nist Sp 800-218A Compliance Check contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0227", "gaissf_id": "D9-CTL-01", "gaissf_title": "PHYSICAL HARM BOUNDARY ENFORCEMENT", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "PE", "family_title": "Physical and Environmental Protection", "family_summary": "Physical access, monitoring, emergency power, fire protection and environmental safeguards.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D9-CTL-01 Physical Harm Boundary Enforcement contributes AI-specific capability to the Physical and Environmental Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0228", "gaissf_id": "D9-CTL-01", "gaissf_title": "PHYSICAL HARM BOUNDARY ENFORCEMENT", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "CP", "family_title": "Contingency Planning", "family_summary": "Business continuity, backups, recovery, alternate processing and contingency testing.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D9-CTL-01 Physical Harm Boundary Enforcement contributes AI-specific capability to the Contingency Planning outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0229", "gaissf_id": "D9-CTL-01", "gaissf_title": "PHYSICAL HARM BOUNDARY ENFORCEMENT", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "IR", "family_title": "Incident Response", "family_summary": "Preparation, detection, analysis, containment, recovery, reporting and incident handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D9-CTL-01 Physical Harm Boundary Enforcement contributes AI-specific capability to the Incident Response outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0230", "gaissf_id": "D9-CTL-01", "gaissf_title": "PHYSICAL HARM BOUNDARY ENFORCEMENT", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D9-CTL-01 Physical Harm Boundary Enforcement contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0231", "gaissf_id": "D9-CTL-02", "gaissf_title": "SAFE STATE AND GRACEFUL DEGRADATION", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "PE", "family_title": "Physical and Environmental Protection", "family_summary": "Physical access, monitoring, emergency power, fire protection and environmental safeguards.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D9-CTL-02 Safe State And Graceful Degradation contributes AI-specific capability to the Physical and Environmental Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0232", "gaissf_id": "D9-CTL-02", "gaissf_title": "SAFE STATE AND GRACEFUL DEGRADATION", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "CP", "family_title": "Contingency Planning", "family_summary": "Business continuity, backups, recovery, alternate processing and contingency testing.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D9-CTL-02 Safe State And Graceful Degradation contributes AI-specific capability to the Contingency Planning outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0233", "gaissf_id": "D9-CTL-02", "gaissf_title": "SAFE STATE AND GRACEFUL DEGRADATION", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "IR", "family_title": "Incident Response", "family_summary": "Preparation, detection, analysis, containment, recovery, reporting and incident handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D9-CTL-02 Safe State And Graceful Degradation contributes AI-specific capability to the Incident Response outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0234", "gaissf_id": "D9-CTL-02", "gaissf_title": "SAFE STATE AND GRACEFUL DEGRADATION", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D9-CTL-02 Safe State And Graceful Degradation contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0235", "gaissf_id": "D9-CTL-03", "gaissf_title": "HUMAN OVERRIDE AND EMERGENCY STOP", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "PE", "family_title": "Physical and Environmental Protection", "family_summary": "Physical access, monitoring, emergency power, fire protection and environmental safeguards.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D9-CTL-03 Human Override And Emergency Stop contributes AI-specific capability to the Physical and Environmental Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0236", "gaissf_id": "D9-CTL-03", "gaissf_title": "HUMAN OVERRIDE AND EMERGENCY STOP", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "CP", "family_title": "Contingency Planning", "family_summary": "Business continuity, backups, recovery, alternate processing and contingency testing.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D9-CTL-03 Human Override And Emergency Stop contributes AI-specific capability to the Contingency Planning outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0237", "gaissf_id": "D9-CTL-03", "gaissf_title": "HUMAN OVERRIDE AND EMERGENCY STOP", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "IR", "family_title": "Incident Response", "family_summary": "Preparation, detection, analysis, containment, recovery, reporting and incident handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D9-CTL-03 Human Override And Emergency Stop contributes AI-specific capability to the Incident Response outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0238", "gaissf_id": "D9-CTL-03", "gaissf_title": "HUMAN OVERRIDE AND EMERGENCY STOP", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D9-CTL-03 Human Override And Emergency Stop contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0239", "gaissf_id": "D9-CTL-04", "gaissf_title": "CYBER-PHYSICAL ATTACK DETECTION", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "PE", "family_title": "Physical and Environmental Protection", "family_summary": "Physical access, monitoring, emergency power, fire protection and environmental safeguards.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D9-CTL-04 Cyber-Physical Attack Detection contributes AI-specific capability to the Physical and Environmental Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0240", "gaissf_id": "D9-CTL-04", "gaissf_title": "CYBER-PHYSICAL ATTACK DETECTION", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "CP", "family_title": "Contingency Planning", "family_summary": "Business continuity, backups, recovery, alternate processing and contingency testing.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D9-CTL-04 Cyber-Physical Attack Detection contributes AI-specific capability to the Contingency Planning outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0241", "gaissf_id": "D9-CTL-04", "gaissf_title": "CYBER-PHYSICAL ATTACK DETECTION", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "IR", "family_title": "Incident Response", "family_summary": "Preparation, detection, analysis, containment, recovery, reporting and incident handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D9-CTL-04 Cyber-Physical Attack Detection contributes AI-specific capability to the Incident Response outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0242", "gaissf_id": "D9-CTL-04", "gaissf_title": "CYBER-PHYSICAL ATTACK DETECTION", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D9-CTL-04 Cyber-Physical Attack Detection contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0243", "gaissf_id": "D9-CTL-04", "gaissf_title": "CYBER-PHYSICAL ATTACK DETECTION", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D9-CTL-04 Cyber-Physical Attack Detection contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0244", "gaissf_id": "D9-CTL-05", "gaissf_title": "PHYSICAL ENVIRONMENT INTEGRITY MONITORING", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "PE", "family_title": "Physical and Environmental Protection", "family_summary": "Physical access, monitoring, emergency power, fire protection and environmental safeguards.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D9-CTL-05 Physical Environment Integrity Monitoring contributes AI-specific capability to the Physical and Environmental Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0245", "gaissf_id": "D9-CTL-05", "gaissf_title": "PHYSICAL ENVIRONMENT INTEGRITY MONITORING", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "CP", "family_title": "Contingency Planning", "family_summary": "Business continuity, backups, recovery, alternate processing and contingency testing.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D9-CTL-05 Physical Environment Integrity Monitoring contributes AI-specific capability to the Contingency Planning outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0246", "gaissf_id": "D9-CTL-05", "gaissf_title": "PHYSICAL ENVIRONMENT INTEGRITY MONITORING", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "IR", "family_title": "Incident Response", "family_summary": "Preparation, detection, analysis, containment, recovery, reporting and incident handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D9-CTL-05 Physical Environment Integrity Monitoring contributes AI-specific capability to the Incident Response outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0247", "gaissf_id": "D9-CTL-05", "gaissf_title": "PHYSICAL ENVIRONMENT INTEGRITY MONITORING", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D9-CTL-05 Physical Environment Integrity Monitoring contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0248", "gaissf_id": "D9-CTL-05", "gaissf_title": "PHYSICAL ENVIRONMENT INTEGRITY MONITORING", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D9-CTL-05 Physical Environment Integrity Monitoring contributes AI-specific capability to the Risk Assessment outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0249", "gaissf_id": "D9-CTL-06", "gaissf_title": "ACTUATOR COMMAND VERIFICATION", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "PE", "family_title": "Physical and Environmental Protection", "family_summary": "Physical access, monitoring, emergency power, fire protection and environmental safeguards.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D9-CTL-06 Actuator Command Verification contributes AI-specific capability to the Physical and Environmental Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0250", "gaissf_id": "D9-CTL-06", "gaissf_title": "ACTUATOR COMMAND VERIFICATION", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "CP", "family_title": "Contingency Planning", "family_summary": "Business continuity, backups, recovery, alternate processing and contingency testing.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D9-CTL-06 Actuator Command Verification contributes AI-specific capability to the Contingency Planning outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0251", "gaissf_id": "D9-CTL-06", "gaissf_title": "ACTUATOR COMMAND VERIFICATION", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "IR", "family_title": "Incident Response", "family_summary": "Preparation, detection, analysis, containment, recovery, reporting and incident handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D9-CTL-06 Actuator Command Verification contributes AI-specific capability to the Incident Response outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0252", "gaissf_id": "D9-CTL-06", "gaissf_title": "ACTUATOR COMMAND VERIFICATION", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D9-CTL-06 Actuator Command Verification contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0253", "gaissf_id": "D9-CTL-07", "gaissf_title": "PHYSICAL INCIDENT EVIDENCE PRESERVATION", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "PE", "family_title": "Physical and Environmental Protection", "family_summary": "Physical access, monitoring, emergency power, fire protection and environmental safeguards.", "relationship": "SP", "coverage": "Substantially Addressed", "confidence": "Medium-High", "rationale": "D9-CTL-07 Physical Incident Evidence Preservation contributes AI-specific capability to the Physical and Environmental Protection outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0254", "gaissf_id": "D9-CTL-07", "gaissf_title": "PHYSICAL INCIDENT EVIDENCE PRESERVATION", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "CP", "family_title": "Contingency Planning", "family_summary": "Business continuity, backups, recovery, alternate processing and contingency testing.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D9-CTL-07 Physical Incident Evidence Preservation contributes AI-specific capability to the Contingency Planning outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0255", "gaissf_id": "D9-CTL-07", "gaissf_title": "PHYSICAL INCIDENT EVIDENCE PRESERVATION", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "IR", "family_title": "Incident Response", "family_summary": "Preparation, detection, analysis, containment, recovery, reporting and incident handling.", "relationship": "P", "coverage": "Partially Addressed", "confidence": "Medium", "rationale": "D9-CTL-07 Physical Incident Evidence Preservation contributes AI-specific capability to the Incident Response outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0256", "gaissf_id": "D9-CTL-07", "gaissf_title": "PHYSICAL INCIDENT EVIDENCE PRESERVATION", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D9-CTL-07 Physical Incident Evidence Preservation contributes AI-specific capability to the System and Information Integrity outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0257", "gaissf_id": "D9-CTL-07", "gaissf_title": "PHYSICAL INCIDENT EVIDENCE PRESERVATION", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "AU", "family_title": "Audit and Accountability", "family_summary": "Event logging, audit record content, review, retention, protection and accountability.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D9-CTL-07 Physical Incident Evidence Preservation contributes AI-specific capability to the Audit and Accountability outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" }, { "record_id": "GAISSF-CRO-036-MAP-0258", "gaissf_id": "D9-CTL-07", "gaissf_title": "PHYSICAL INCIDENT EVIDENCE PRESERVATION", "gaissf_domain": "D9: PHYSICAL AI SAFETY", "fedramp_family": "CA", "family_title": "Assessment, Authorization and Monitoring", "family_summary": "Control assessment, authorization decisions, continuous monitoring, plans of action and milestones.", "relationship": "S", "coverage": "Indirectly Supported", "confidence": "Medium", "rationale": "D9-CTL-07 Physical Incident Evidence Preservation contributes AI-specific capability to the Assessment, Authorization and Monitoring outcome area. The relationship is based on shared security intent, not on equivalence to individual FedRAMP control statements, parameters, implementation guidance, or assessment objectives.", "residual_gap": "FedRAMP requires cloud-service-boundary-specific implementation statements, inherited/shared controls, FedRAMP-defined parameters, evidence, testing and authorization/certification records beyond this GAISSF control.", "gaissf_source": "GAISSF-NOR-004 v1.0", "fedramp_source": "FedRAMP Consolidated Rules for 2026 / NIST SP 800-53 Rev. 5" } ], "reverse_coverage": [ { "family": "AC", "family_title": "Access Control", "family_summary": "Account and privilege management, access enforcement, separation of duties, least privilege, remote access and information flow.", "mapped_controls": [ "D2-CTL-01", "D2-CTL-02", "D2-CTL-03", "D2-CTL-04", "D2-CTL-05", "D2-CTL-06", "D3-CTL-01", "D3-CTL-02", "D3-CTL-03", "D3-CTL-04", "D3-CTL-05", "D3-CTL-06", "D3-CTL-07", "D7-CTL-H03" ], "mapped_count": 14, "mapping_records": 14, "coverage_status": "Substantially Addressed", "residual_gap": "Family-level mapping does not establish implementation of every Rev5 control or enhancement. A Class/impact-specific control baseline, FedRAMP parameters, shared-responsibility allocation, assessment procedures and authorization/certification evidence remain necessary." }, { "family": "AT", "family_title": "Awareness and Training", "family_summary": "Security literacy, role-based training, social engineering awareness and training records.", "mapped_controls": [ "D7-CTL-H01", "D7-CTL-H02", "D7-CTL-H03", "D7-CTL-H04", "D7-CTL-H05" ], "mapped_count": 5, "mapping_records": 5, "coverage_status": "Substantially Addressed", "residual_gap": "Family-level mapping does not establish implementation of every Rev5 control or enhancement. A Class/impact-specific control baseline, FedRAMP parameters, shared-responsibility allocation, assessment procedures and authorization/certification evidence remain necessary." }, { "family": "AU", "family_title": "Audit and Accountability", "family_summary": "Event logging, audit record content, review, retention, protection and accountability.", "mapped_controls": [ "D6-CTL-01", "D6-CTL-02", "D6-CTL-03", "D6-CTL-04", "D6-CTL-05", "D6-CTL-06", "D6-CTL-07", "D8-CTL-04", "D9-CTL-07" ], "mapped_count": 9, "mapping_records": 9, "coverage_status": "Substantially Addressed", "residual_gap": "Family-level mapping does not establish implementation of every Rev5 control or enhancement. A Class/impact-specific control baseline, FedRAMP parameters, shared-responsibility allocation, assessment procedures and authorization/certification evidence remain necessary." }, { "family": "CA", "family_title": "Assessment, Authorization and Monitoring", "family_summary": "Control assessment, authorization decisions, continuous monitoring, plans of action and milestones.", "mapped_controls": [ "D6-CTL-01", "D6-CTL-02", "D6-CTL-03", "D6-CTL-04", "D6-CTL-05", "D6-CTL-06", "D6-CTL-07", "D8-CTL-01", "D8-CTL-02", "D8-CTL-03", "D8-CTL-04", "D8-CTL-05", "D9-CTL-07" ], "mapped_count": 13, "mapping_records": 13, "coverage_status": "Substantially Addressed", "residual_gap": "Family-level mapping does not establish implementation of every Rev5 control or enhancement. A Class/impact-specific control baseline, FedRAMP parameters, shared-responsibility allocation, assessment procedures and authorization/certification evidence remain necessary." }, { "family": "CM", "family_title": "Configuration Management", "family_summary": "Baselines, configuration settings, change control, inventories and least functionality.", "mapped_controls": [ "D4-CTL-01", "D4-CTL-02", "D4-CTL-03", "D4-CTL-04", "D4-CTL-05", "D4-CTL-06", "D4-CTL-07", "D6-CTL-05", "D8-CTL-05" ], "mapped_count": 9, "mapping_records": 9, "coverage_status": "Substantially Addressed", "residual_gap": "Family-level mapping does not establish implementation of every Rev5 control or enhancement. A Class/impact-specific control baseline, FedRAMP parameters, shared-responsibility allocation, assessment procedures and authorization/certification evidence remain necessary." }, { "family": "CP", "family_title": "Contingency Planning", "family_summary": "Business continuity, backups, recovery, alternate processing and contingency testing.", "mapped_controls": [ "D6-CTL-07", "D8-CTL-04", "D9-CTL-01", "D9-CTL-02", "D9-CTL-03", "D9-CTL-04", "D9-CTL-05", "D9-CTL-06", "D9-CTL-07" ], "mapped_count": 9, "mapping_records": 9, "coverage_status": "Substantially Addressed", "residual_gap": "Family-level mapping does not establish implementation of every Rev5 control or enhancement. A Class/impact-specific control baseline, FedRAMP parameters, shared-responsibility allocation, assessment procedures and authorization/certification evidence remain necessary." }, { "family": "IA", "family_title": "Identification and Authentication", "family_summary": "Identity proofing, multifactor authentication, authenticator management and service identification.", "mapped_controls": [ "D3-CTL-01", "D3-CTL-02", "D3-CTL-03", "D3-CTL-04", "D3-CTL-05", "D3-CTL-06", "D3-CTL-07", "D7-CTL-H01", "D7-CTL-H02", "D7-CTL-H03", "D7-CTL-H04", "D7-CTL-H05" ], "mapped_count": 12, "mapping_records": 12, "coverage_status": "Substantially Addressed", "residual_gap": "Family-level mapping does not establish implementation of every Rev5 control or enhancement. A Class/impact-specific control baseline, FedRAMP parameters, shared-responsibility allocation, assessment procedures and authorization/certification evidence remain necessary." }, { "family": "IR", "family_title": "Incident Response", "family_summary": "Preparation, detection, analysis, containment, recovery, reporting and incident handling.", "mapped_controls": [ "D6-CTL-04", "D6-CTL-07", "D7-CTL-H01", "D7-CTL-H02", "D7-CTL-H03", "D7-CTL-H04", "D7-CTL-H05", "D8-CTL-04", "D9-CTL-01", "D9-CTL-02", "D9-CTL-03", "D9-CTL-04", "D9-CTL-05", "D9-CTL-06", "D9-CTL-07" ], "mapped_count": 15, "mapping_records": 15, "coverage_status": "Substantially Addressed", "residual_gap": "Family-level mapping does not establish implementation of every Rev5 control or enhancement. A Class/impact-specific control baseline, FedRAMP parameters, shared-responsibility allocation, assessment procedures and authorization/certification evidence remain necessary." }, { "family": "MA", "family_title": "Maintenance", "family_summary": "Controlled maintenance, tools, personnel, remote maintenance and maintenance records.", "mapped_controls": [], "mapped_count": 0, "mapping_records": 0, "coverage_status": "Not Addressed", "residual_gap": "Family-level mapping does not establish implementation of every Rev5 control or enhancement. A Class/impact-specific control baseline, FedRAMP parameters, shared-responsibility allocation, assessment procedures and authorization/certification evidence remain necessary." }, { "family": "MP", "family_title": "Media Protection", "family_summary": "Media access, marking, storage, transport, sanitization and use.", "mapped_controls": [ "D3-CTL-06", "D3-CTL-07", "D6-CTL-05" ], "mapped_count": 3, "mapping_records": 3, "coverage_status": "Partially Addressed", "residual_gap": "Family-level mapping does not establish implementation of every Rev5 control or enhancement. A Class/impact-specific control baseline, FedRAMP parameters, shared-responsibility allocation, assessment procedures and authorization/certification evidence remain necessary." }, { "family": "PE", "family_title": "Physical and Environmental Protection", "family_summary": "Physical access, monitoring, emergency power, fire protection and environmental safeguards.", "mapped_controls": [ "D9-CTL-01", "D9-CTL-02", "D9-CTL-03", "D9-CTL-04", "D9-CTL-05", "D9-CTL-06", "D9-CTL-07" ], "mapped_count": 7, "mapping_records": 7, "coverage_status": "Substantially Addressed", "residual_gap": "Family-level mapping does not establish implementation of every Rev5 control or enhancement. A Class/impact-specific control baseline, FedRAMP parameters, shared-responsibility allocation, assessment procedures and authorization/certification evidence remain necessary." }, { "family": "PL", "family_title": "Planning", "family_summary": "System security planning, rules of behavior, architecture and privacy planning.", "mapped_controls": [ "D6-CTL-01", "D6-CTL-02", "D6-CTL-03", "D6-CTL-04", "D6-CTL-05", "D6-CTL-06", "D6-CTL-07", "D8-CTL-01", "D8-CTL-02", "D8-CTL-03", "D8-CTL-04", "D8-CTL-05" ], "mapped_count": 12, "mapping_records": 12, "coverage_status": "Substantially Addressed", "residual_gap": "Family-level mapping does not establish implementation of every Rev5 control or enhancement. A Class/impact-specific control baseline, FedRAMP parameters, shared-responsibility allocation, assessment procedures and authorization/certification evidence remain necessary." }, { "family": "PM", "family_title": "Program Management", "family_summary": "Enterprise security and privacy governance, risk strategy, resources, inventories and program oversight.", "mapped_controls": [ "D6-CTL-01", "D6-CTL-02", "D6-CTL-03", "D6-CTL-04", "D6-CTL-05", "D6-CTL-06", "D6-CTL-07", "D8-CTL-01", "D8-CTL-02", "D8-CTL-03", "D8-CTL-04", "D8-CTL-05" ], "mapped_count": 12, "mapping_records": 12, "coverage_status": "Substantially Addressed", "residual_gap": "Family-level mapping does not establish implementation of every Rev5 control or enhancement. A Class/impact-specific control baseline, FedRAMP parameters, shared-responsibility allocation, assessment procedures and authorization/certification evidence remain necessary." }, { "family": "PS", "family_title": "Personnel Security", "family_summary": "Screening, termination, transfer, sanctions and external personnel security.", "mapped_controls": [], "mapped_count": 0, "mapping_records": 0, "coverage_status": "Not Addressed", "residual_gap": "Family-level mapping does not establish implementation of every Rev5 control or enhancement. A Class/impact-specific control baseline, FedRAMP parameters, shared-responsibility allocation, assessment procedures and authorization/certification evidence remain necessary." }, { "family": "PT", "family_title": "Personally Identifiable Information Processing and Transparency", "family_summary": "Privacy authority, purpose, minimization, consent, notices, rights and data quality.", "mapped_controls": [ "D5-CTL-01", "D5-CTL-02", "D5-CTL-03", "D5-CTL-04", "D5-CTL-05", "D5-CTL-06" ], "mapped_count": 6, "mapping_records": 6, "coverage_status": "Substantially Addressed", "residual_gap": "Family-level mapping does not establish implementation of every Rev5 control or enhancement. A Class/impact-specific control baseline, FedRAMP parameters, shared-responsibility allocation, assessment procedures and authorization/certification evidence remain necessary." }, { "family": "RA", "family_title": "Risk Assessment", "family_summary": "Risk assessments, vulnerability monitoring, threat hunting, impact analysis and supply-chain risk.", "mapped_controls": [ "D1-CTL-01", "D1-CTL-02", "D1-CTL-03", "D1-CTL-04", "D1-CTL-05", "D1-CTL-06", "D1-CTL-07", "D1-CTL-08", "D1-CTL-09", "D2-CTL-01", "D2-CTL-02", "D2-CTL-03", "D2-CTL-04", "D2-CTL-05", "D2-CTL-06", "D3-CTL-03", "D4-CTL-01", "D4-CTL-02", "D4-CTL-03", "D4-CTL-04", "D4-CTL-05", "D4-CTL-06", "D4-CTL-07", "D5-CTL-03", "D7-CTL-H02", "D9-CTL-04", "D9-CTL-05" ], "mapped_count": 27, "mapping_records": 27, "coverage_status": "Substantially Addressed", "residual_gap": "Family-level mapping does not establish implementation of every Rev5 control or enhancement. A Class/impact-specific control baseline, FedRAMP parameters, shared-responsibility allocation, assessment procedures and authorization/certification evidence remain necessary." }, { "family": "SA", "family_title": "System and Services Acquisition", "family_summary": "Security engineering, development lifecycle, external services, developer testing and acquisition controls.", "mapped_controls": [ "D1-CTL-01", "D1-CTL-02", "D1-CTL-03", "D1-CTL-04", "D1-CTL-05", "D1-CTL-06", "D1-CTL-07", "D1-CTL-08", "D1-CTL-09", "D3-CTL-01", "D3-CTL-02", "D3-CTL-03", "D3-CTL-04", "D3-CTL-05", "D3-CTL-06", "D3-CTL-07", "D4-CTL-01", "D4-CTL-02", "D4-CTL-03", "D4-CTL-04", "D4-CTL-05", "D4-CTL-06", "D4-CTL-07", "D6-CTL-06", "D8-CTL-05" ], "mapped_count": 25, "mapping_records": 25, "coverage_status": "Substantially Addressed", "residual_gap": "Family-level mapping does not establish implementation of every Rev5 control or enhancement. A Class/impact-specific control baseline, FedRAMP parameters, shared-responsibility allocation, assessment procedures and authorization/certification evidence remain necessary." }, { "family": "SC", "family_title": "System and Communications Protection", "family_summary": "Boundary protection, cryptography, architecture, transmission security, isolation and denial-of-service protection.", "mapped_controls": [ "D1-CTL-06", "D2-CTL-01", "D2-CTL-02", "D2-CTL-03", "D2-CTL-04", "D2-CTL-05", "D2-CTL-06", "D3-CTL-01", "D3-CTL-02", "D3-CTL-03", "D3-CTL-04", "D3-CTL-05", "D3-CTL-06", "D3-CTL-07", "D5-CTL-01", "D5-CTL-02", "D5-CTL-03", "D5-CTL-04", "D5-CTL-05", "D5-CTL-06" ], "mapped_count": 20, "mapping_records": 20, "coverage_status": "Substantially Addressed", "residual_gap": "Family-level mapping does not establish implementation of every Rev5 control or enhancement. A Class/impact-specific control baseline, FedRAMP parameters, shared-responsibility allocation, assessment procedures and authorization/certification evidence remain necessary." }, { "family": "SI", "family_title": "System and Information Integrity", "family_summary": "Flaw remediation, malicious code protection, monitoring, alerts, software integrity and information handling.", "mapped_controls": [ "D1-CTL-01", "D1-CTL-02", "D1-CTL-03", "D1-CTL-04", "D1-CTL-05", "D1-CTL-06", "D1-CTL-07", "D1-CTL-08", "D1-CTL-09", "D2-CTL-01", "D2-CTL-02", "D2-CTL-03", "D2-CTL-04", "D2-CTL-05", "D2-CTL-06", "D3-CTL-01", "D3-CTL-02", "D3-CTL-03", "D3-CTL-04", "D3-CTL-05", "D3-CTL-06", "D3-CTL-07", "D4-CTL-02", "D4-CTL-04", "D5-CTL-01", "D5-CTL-02", "D5-CTL-03", "D5-CTL-04", "D5-CTL-05", "D5-CTL-06", "D7-CTL-H01", "D7-CTL-H02", "D7-CTL-H03", "D7-CTL-H04", "D7-CTL-H05", "D8-CTL-05", "D9-CTL-01", "D9-CTL-02", "D9-CTL-03", "D9-CTL-04", "D9-CTL-05", "D9-CTL-06", "D9-CTL-07" ], "mapped_count": 43, "mapping_records": 43, "coverage_status": "Substantially Addressed", "residual_gap": "Family-level mapping does not establish implementation of every Rev5 control or enhancement. A Class/impact-specific control baseline, FedRAMP parameters, shared-responsibility allocation, assessment procedures and authorization/certification evidence remain necessary." }, { "family": "SR", "family_title": "Supply Chain Risk Management", "family_summary": "Supply-chain plans, provenance, supplier assessments, component authenticity and acquisition risk.", "mapped_controls": [ "D1-CTL-01", "D1-CTL-02", "D1-CTL-03", "D1-CTL-04", "D1-CTL-05", "D1-CTL-06", "D1-CTL-07", "D1-CTL-08", "D1-CTL-09", "D4-CTL-01", "D4-CTL-02", "D4-CTL-03", "D4-CTL-04", "D4-CTL-05", "D4-CTL-06", "D4-CTL-07", "D6-CTL-06" ], "mapped_count": 17, "mapping_records": 17, "coverage_status": "Substantially Addressed", "residual_gap": "Family-level mapping does not establish implementation of every Rev5 control or enhancement. A Class/impact-specific control baseline, FedRAMP parameters, shared-responsibility allocation, assessment procedures and authorization/certification evidence remain necessary." } ], "notably_absent": [ "No FedRAMP Certification, authorization or agency ATO is created by this mapping.", "No individual FedRAMP control is deemed implemented solely because a GAISSF control maps to its family.", "No FedRAMP-recognized independent assessment has been performed.", "No cloud-service boundary, data-impact class, inherited-control model or agency use case is established.", "No SSP, SAP, SAR, POA&M, Security Decision Record or continuous-monitoring package is completed.", "No endorsement, acceptance or recognition by GSA, FedRAMP, OMB, NIST or any federal agency is implied." ] }