{ "profile": { "uuid": "63d53c31-0b0f-561d-9131-804c6a535514", "name": "CRI FS AI RMF v1.0 — Evolving Adoption Stage", "confidentiality": "Moderate", "integrity": "Moderate", "availability": "Moderate", "category": "Moderate", "isPublic": true }, "mappings": [ { "profileMappingId": 0, "controlId": 20954, "controlIdentifier": "GV-1.1.1", "controlGuid": "f6bb1f4c-7fc8-5dc8-893b-6dc237ef9495", "controlTitle": "GV-1.1.1 - AI Legal, Regulatory, and Policy Integration", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20955, "controlIdentifier": "GV-1.1.2", "controlGuid": "7e3a7417-4b1d-5a84-ad2d-77ca9a879477", "controlTitle": "GV-1.1.2 - AI Compliance Responsibilities Management", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20956, "controlIdentifier": "GV-1.1.3", "controlGuid": "1f093b5c-dbbd-5e8f-adfb-35ecffe3c000", "controlTitle": "GV-1.1.3 - AI Compliance Validation Procedures", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20957, "controlIdentifier": "GV-1.1.4", "controlGuid": "0b7cc4f6-505d-50c3-97c2-3ca74d410b51", "controlTitle": "GV-1.1.4 - AI Compliance Documentation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20958, "controlIdentifier": "GV-1.1.5", "controlGuid": "fb7050a9-d584-5a1f-bd32-e16840de5ae7", "controlTitle": "GV-1.1.5 - Legal Feedback and Change Integration", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20959, "controlIdentifier": "GV-1.1.6", "controlGuid": "865d5e35-dfc9-571e-9108-a27ffbebabc4", "controlTitle": "GV-1.1.6 - Data Lifecycle and Retention", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20960, "controlIdentifier": "GV-1.2.1", "controlGuid": "dfb49931-0704-5d29-a9b5-1e3581226b61", "controlTitle": "GV-1.2.1 - AI Principles and Policy Integration", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20961, "controlIdentifier": "GV-1.2.2", "controlGuid": "f118701e-1a68-5c42-af84-ef163891503d", "controlTitle": "GV-1.2.2 - AI Terminology and Scope Glossary", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20962, "controlIdentifier": "GV-1.2.3", "controlGuid": "bbad8bc3-43c7-5916-ae70-b25a0e8ac2e0", "controlTitle": "GV-1.2.3 - AI Acceptable Use Policy", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20963, "controlIdentifier": "GV-1.2.4", "controlGuid": "7adc91c4-0a0e-59a0-8bc6-d19a07b74fe7", "controlTitle": "GV-1.2.4 - AI Trustworthy Principles Training", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20964, "controlIdentifier": "GV-1.2.5", "controlGuid": "b59757cb-d55b-5971-b3ce-f37717e35f8c", "controlTitle": "GV-1.2.5 - AI Governance and Risk Standards", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20965, "controlIdentifier": "GV-1.2.6", "controlGuid": "4058fd12-fadb-5779-860e-adc6648749d9", "controlTitle": "GV-1.2.6 - AI Model Standards and Validation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20966, "controlIdentifier": "GV-1.3.1", "controlGuid": "da1359c2-6dd9-5d0a-a259-742bfc4b718f", "controlTitle": "GV-1.3.1 - AI Risk Assessment Models", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20967, "controlIdentifier": "GV-1.3.2", "controlGuid": "3eb6f4b4-3039-5488-a81a-4a5479d0527b", "controlTitle": "GV-1.3.2 - AI Risk Monitoring and Escalation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20968, "controlIdentifier": "GV-1.3.3", "controlGuid": "1921eae8-c05e-58d9-bd4b-7fb0027cd8ba", "controlTitle": "GV-1.3.3 - AI Impact Measurement Policies", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20969, "controlIdentifier": "GV-1.3.4", "controlGuid": "3e50c381-d3d1-5711-b63a-5e87f9ea4dee", "controlTitle": "GV-1.3.4 - AI Use Risk Acceptance and Rejection Framework", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20970, "controlIdentifier": "GV-1.4.1", "controlGuid": "027ba339-4d90-5a5b-a2ce-2bfd24c34b41", "controlTitle": "GV-1.4.1 - AI Risk Management Framework", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20971, "controlIdentifier": "GV-1.4.2", "controlGuid": "a3afb000-b969-586f-9000-e5fc34f3e914", "controlTitle": "GV-1.4.2 - AI Risk Documentation Standards", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20972, "controlIdentifier": "GV-1.4.3", "controlGuid": "82c0b1a9-f76b-5708-8daf-dca8e9bf78e2", "controlTitle": "GV-1.4.3 - AI Documentation Repository and Access", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20973, "controlIdentifier": "GV-1.5.1", "controlGuid": "f9b96224-90bd-5374-b5fd-b439772db828", "controlTitle": "GV-1.5.1 - AI Performance and Risk Monitoring", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20974, "controlIdentifier": "GV-1.5.2", "controlGuid": "14258231-d7a2-5ef4-a1a8-9146cf33a22b", "controlTitle": "GV-1.5.2 - Periodic AI Risk Management Process Review", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20976, "controlIdentifier": "GV-1.5.4", "controlGuid": "144cd365-3aa6-5cba-9c26-c491a31c14d4", "controlTitle": "GV-1.5.4 - Independent AI Risk Management Process Assessment", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20977, "controlIdentifier": "GV-1.6.1", "controlGuid": "2e3dc5ee-82b7-54a5-a989-89906f39087e", "controlTitle": "GV-1.6.1 - AI Inventory Management", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20978, "controlIdentifier": "GV-1.6.2", "controlGuid": "578f69bc-6457-5eef-9075-207b8c5b6798", "controlTitle": "GV-1.6.2 - AI Inventory and Data Integration", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20979, "controlIdentifier": "GV-1.6.3", "controlGuid": "b122b0a3-0976-5f6a-beeb-3a95a14db08a", "controlTitle": "GV-1.6.3 - AI Inventory Integration for Purchased and Shadow Systems", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20980, "controlIdentifier": "GV-1.6.4", "controlGuid": "089b6d1b-ac0e-5c72-baf7-c1a612971f43", "controlTitle": "GV-1.6.4 - Risk-Based Inventory Resources", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20981, "controlIdentifier": "GV-1.6.5", "controlGuid": "c10eefbb-6784-5998-9803-06b00cfac2f7", "controlTitle": "GV-1.6.5 - AI Inventory Risk Analysis", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20982, "controlIdentifier": "GV-1.6.6", "controlGuid": "18c8cfa3-d95b-5e3e-baad-183ce57481d4", "controlTitle": "GV-1.6.6 - AI Inventory Audits", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20983, "controlIdentifier": "GV-1.7.1", "controlGuid": "b07ba876-f84a-5c48-9126-275e29ff2f5f", "controlTitle": "GV-1.7.1 - AI System Decommissioning Policies and Impact Procedures", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20984, "controlIdentifier": "GV-2.1.1", "controlGuid": "ace991d7-fbd1-5a32-8021-8622c721d341", "controlTitle": "GV-2.1.1 - AI Risk Management Roles and Responsibilities", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20985, "controlIdentifier": "GV-2.1.2", "controlGuid": "5b552100-83d0-53f1-8d10-ac0799549022", "controlTitle": "GV-2.1.2 - AI Risk Communication and Escalation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20986, "controlIdentifier": "GV-2.1.3", "controlGuid": "d58f75bb-4c60-57fe-a77f-016b832af0ae", "controlTitle": "GV-2.1.3 - Roles and Processes Review/Update", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20987, "controlIdentifier": "GV-2.1.4", "controlGuid": "708b2917-f4ac-596b-9709-115b83795ee9", "controlTitle": "GV-2.1.4 - AI Risk Roles in Job and Performance", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20988, "controlIdentifier": "GV-2.2.1", "controlGuid": "66f63335-00c8-5a5c-b1e1-b89a586b54d8", "controlTitle": "GV-2.2.1 - AI Risk Management Training and Policies", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20989, "controlIdentifier": "GV-2.2.2", "controlGuid": "74bcdc46-e732-5709-ab43-4a5d74b6b044", "controlTitle": "GV-2.2.2 - Mandatory AI Risk Management Training", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20992, "controlIdentifier": "GV-2.3.1", "controlGuid": "179ef7ff-df7a-576b-bb68-3d433b66703f", "controlTitle": "GV-2.3.1 - Leadership Commitment to Responsible AI", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20993, "controlIdentifier": "GV-2.3.2", "controlGuid": "3b7f154e-80f4-5ad4-83d3-7cf45d490143", "controlTitle": "GV-2.3.2 - AI Risk Appetite and Thresholds", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20994, "controlIdentifier": "GV-2.3.3", "controlGuid": "80648930-2c21-55e4-a729-e4ac3fc4cac4", "controlTitle": "GV-2.3.3 - AI Governance Structure", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20996, "controlIdentifier": "GV-3.1.1", "controlGuid": "22e28d58-732e-5d56-9029-91019387e9dd", "controlTitle": "GV-3.1.1 - Multiple Perspectives in AI Risk Teams", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20997, "controlIdentifier": "GV-3.2.1", "controlGuid": "52aa6859-9048-5ec6-b0f6-6fc01577a89a", "controlTitle": "GV-3.2.1 - Human-AI Supervision Policies", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20998, "controlIdentifier": "GV-3.2.2", "controlGuid": "182de4d1-ac4e-5f4a-bd97-cadda3f7378a", "controlTitle": "GV-3.2.2 - Monitoring Human-AI Oversight", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 20999, "controlIdentifier": "GV-4.1.1", "controlGuid": "fcc37d61-0cc7-599c-9c56-77645752f511", "controlTitle": "GV-4.1.1 - AI Trustworthy Principles and Communication", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21000, "controlIdentifier": "GV-4.1.2", "controlGuid": "2f586978-9cf4-5bd1-8e16-c68a13e60679", "controlTitle": "GV-4.1.2 - Open Risk Communication Policies", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21001, "controlIdentifier": "GV-4.1.3", "controlGuid": "c83e061d-8c0f-53b8-8071-ed5587448f82", "controlTitle": "GV-4.1.3 - AI Safety Lessons and Best Practices", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21002, "controlIdentifier": "GV-4.2.1", "controlGuid": "477d7d28-01da-55a2-b1a8-d654f2668b6f", "controlTitle": "GV-4.2.1 - AI Risk and Impact Documentation Templates", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21003, "controlIdentifier": "GV-4.2.2", "controlGuid": "7bdfd00c-0a33-5624-b15a-3d524c0c6127", "controlTitle": "GV-4.2.2 - Risk Documentation Review and Updates", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21004, "controlIdentifier": "GV-4.2.3", "controlGuid": "9ba910be-f8e5-5c8c-8e83-0a8b45c6ac0f", "controlTitle": "GV-4.2.3 - Benefits Monitoring and Updates Plan", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21005, "controlIdentifier": "GV-4.2.4", "controlGuid": "93b06330-b75f-5e85-8c8e-f33a97579954", "controlTitle": "GV-4.2.4 - AI Risk Communication and Stakeholder Transparency", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21006, "controlIdentifier": "GV-4.3.1", "controlGuid": "abf6c915-a4e4-5b45-9089-f36e76b26bd8", "controlTitle": "GV-4.3.1 - AI Testing and Validation Strategy", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21007, "controlIdentifier": "GV-4.3.2", "controlGuid": "8053a4ec-0f54-5aa6-b043-6582870a6461", "controlTitle": "GV-4.3.2 - AI Incident Identification and Resolution", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21008, "controlIdentifier": "GV-4.3.3", "controlGuid": "6c32d530-3930-5541-9eb8-c78b64589c9e", "controlTitle": "GV-4.3.3 - AI Testing and Incident Response Training", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21009, "controlIdentifier": "GV-4.3.4", "controlGuid": "9dd3461b-fb96-5415-b41e-df54db7c2aab", "controlTitle": "GV-4.3.4 - AI Incident Tracking and Analysis", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21011, "controlIdentifier": "GV-4.3.6", "controlGuid": "340230c2-ffbb-5a84-a0ac-596d12bbc960", "controlTitle": "GV-4.3.6 - AI Post-Incident Review and Improvements", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21012, "controlIdentifier": "GV-5.1.1", "controlGuid": "525f1456-5dcb-57af-add6-e863e8523544", "controlTitle": "GV-5.1.1 - External Stakeholder Feedback Channels", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21013, "controlIdentifier": "GV-5.1.2", "controlGuid": "ff7174c4-305e-5824-8ecf-5a32acd02a51", "controlTitle": "GV-5.1.2 - Stakeholder Feedback Policy and Prioritization", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21014, "controlIdentifier": "GV-5.1.3", "controlGuid": "c3e19234-40a0-57c7-b6f2-08eee342adf8", "controlTitle": "GV-5.1.3 - Industry Collaboration and Responsible AI", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21015, "controlIdentifier": "GV-5.2.1", "controlGuid": "052e308f-ba9b-561c-a187-5ffa2e469424", "controlTitle": "GV-5.2.1 - Stakeholder Engagement Processes in Development and Deployment", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21016, "controlIdentifier": "GV-5.2.2", "controlGuid": "ba33bc35-a49c-5978-8f30-0c4ec362579c", "controlTitle": "GV-5.2.2 - Feedback Evaluation and Prioritization", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21017, "controlIdentifier": "GV-5.2.3", "controlGuid": "ac8da314-e781-5e9e-a71b-b4185999bfca", "controlTitle": "GV-5.2.3 - Feedback Conflict Resolution", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21019, "controlIdentifier": "GV-5.2.5", "controlGuid": "d4929fbf-0fcd-5fec-8744-0e7f9510d489", "controlTitle": "GV-5.2.5 - Stakeholder Feedback Education and Transparency", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21020, "controlIdentifier": "GV-6.1.1", "controlGuid": "cadcfe52-ef29-5004-b087-2db08ab29a33", "controlTitle": "GV-6.1.1 - Third-Party AI Evaluation and Selection", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21021, "controlIdentifier": "GV-6.1.2", "controlGuid": "6b0296b7-d6bc-5e26-933c-ff93f5835b31", "controlTitle": "GV-6.1.2 - Third-Party System Requirements", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21022, "controlIdentifier": "GV-6.1.3", "controlGuid": "c8c2bf79-fc54-5ca0-a9ed-4f6273a5b947", "controlTitle": "GV-6.1.3 - Procurement and AI Partner Evaluation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21023, "controlIdentifier": "GV-6.1.4", "controlGuid": "4ea79382-c047-5b61-b078-e31560f42697", "controlTitle": "GV-6.1.4 - Due Diligence for AI Vendors", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21024, "controlIdentifier": "GV-6.1.5", "controlGuid": "2d24be13-e246-5290-bc0a-93aa6cbacff0", "controlTitle": "GV-6.1.5 - Third-Party AI Risk Documentation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21025, "controlIdentifier": "GV-6.1.6", "controlGuid": "afa15af6-4b0e-506a-869d-61f873586675", "controlTitle": "GV-6.1.6 - Fourth-Party Disclosure and Termination", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21026, "controlIdentifier": "GV-6.1.7", "controlGuid": "8bef066c-a794-5de4-b633-efbac1ceae77", "controlTitle": "GV-6.1.7 - System Requirements Review and Updates", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21027, "controlIdentifier": "GV-6.1.8", "controlGuid": "711daac4-d6e4-59d9-b7de-557d575f77df", "controlTitle": "GV-6.1.8 - Third-Party Concentration Risk Management", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21028, "controlIdentifier": "GV-6.1.9", "controlGuid": "6eafe059-3cab-5f53-a352-352d250462fa", "controlTitle": "GV-6.1.9 - Third-Party AI Compliance Monitoring", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21029, "controlIdentifier": "GV-6.1.10", "controlGuid": "f3c4d252-e674-51d8-8421-997b01bb8793", "controlTitle": "GV-6.1.10 - Third-Party AI Incident Protocols", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21030, "controlIdentifier": "GV-6.1.11", "controlGuid": "eaedf17f-fbb2-5a09-b101-da970a7700f2", "controlTitle": "GV-6.1.11 - AI Third-Party Training and Resources", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21031, "controlIdentifier": "GV-6.2.1", "controlGuid": "1d7217e3-4e0d-5e0c-a5cd-b9f685118f55", "controlTitle": "GV-6.2.1 - Third-Party AI Contingency Plans", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21032, "controlIdentifier": "GV-6.2.2", "controlGuid": "f06dddb1-4145-5497-81aa-b605363deb25", "controlTitle": "GV-6.2.2 - Failure and Incident Communication Protocols", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21033, "controlIdentifier": "GV-6.2.3", "controlGuid": "3b1408c9-e085-55d1-9cf8-c5e6fec55965", "controlTitle": "GV-6.2.3 - SLAs and Contracts with AI Vendors", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21034, "controlIdentifier": "GV-6.2.4", "controlGuid": "acbdb498-1702-5e79-90b5-1e8a7e24ca62", "controlTitle": "GV-6.2.4 - Monitoring and Early Warning Systems", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21035, "controlIdentifier": "MP-1.1.1", "controlGuid": "c53f41ae-6b77-58e6-bc2a-3299722957c7", "controlTitle": "MP-1.1.1 - AI Purpose and Context Documentation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21036, "controlIdentifier": "MP-1.1.2", "controlGuid": "c60f06eb-c526-54c5-8801-8f128c16d549", "controlTitle": "MP-1.1.2 - Impact and Stakeholder Impact Assessment", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21037, "controlIdentifier": "MP-1.1.3", "controlGuid": "34248997-f13f-5afd-ab8b-bfb2738afa11", "controlTitle": "MP-1.1.3 - Assumptions, Risks, and TEVV Documentation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21038, "controlIdentifier": "MP-1.1.4", "controlGuid": "0e3349eb-4bc5-5d55-b998-e414364cb62f", "controlTitle": "MP-1.1.4 - Non-AI Alternatives Evaluation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21039, "controlIdentifier": "MP-1.2.1", "controlGuid": "81131ffa-6d90-51be-9857-99de7446caf5", "controlTitle": "MP-1.2.1 - Multidisciplinary AI Impact Teams", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21040, "controlIdentifier": "MP-1.3.1", "controlGuid": "17a54ec6-387f-5577-82d2-36922b97c5b6", "controlTitle": "MP-1.3.1 - AI Alignment with Mission and Values", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21041, "controlIdentifier": "MP-1.3.2", "controlGuid": "371efe2f-9b7e-5e3c-8930-12c6d7de3da0", "controlTitle": "MP-1.3.2 - AI Purpose and Context Review", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21042, "controlIdentifier": "MP-1.4.1", "controlGuid": "afad2c7e-ae7b-57d1-ae96-bc10b889473c", "controlTitle": "MP-1.4.1 - AI Business Value and Context Communication", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21043, "controlIdentifier": "MP-1.5.1", "controlGuid": "d00a6341-3066-52c3-a16c-b3494cda77c0", "controlTitle": "MP-1.5.1 - AI Risk Tolerance Definitions", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21044, "controlIdentifier": "MP-1.5.2", "controlGuid": "e77727eb-cb30-515e-9157-a9f8dbb329d6", "controlTitle": "MP-1.5.2 - Design Decision Rationale Documentation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21045, "controlIdentifier": "MP-1.6.1", "controlGuid": "c05e6555-fea8-5dac-85c3-484c130e35bd", "controlTitle": "MP-1.6.1 - AI Requirements from Stakeholders", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21046, "controlIdentifier": "MP-1.6.2", "controlGuid": "e85a5c96-b677-59f7-9db3-9a20ee1d0576", "controlTitle": "MP-1.6.2 - Data Interdependency and Provenance Documentation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21047, "controlIdentifier": "MP-1.6.3", "controlGuid": "d1ceb9c9-051f-5ab1-8a18-91d6c578cd48", "controlTitle": "MP-1.6.3 - Context-Informed Data Design", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21048, "controlIdentifier": "MP-2.1.1", "controlGuid": "e210f55f-1929-54dd-9693-4ed3b455c4b0", "controlTitle": "MP-2.1.1 - AI Learning and Decision Tasks", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21049, "controlIdentifier": "MP-2.1.2", "controlGuid": "7277fa3d-c8c8-5e25-b126-0a9729d3da0a", "controlTitle": "MP-2.1.2 - Assumptions and Limitations Documentation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21050, "controlIdentifier": "MP-2.1.3", "controlGuid": "b397e6a6-657c-5fa0-8660-6cf95b2e03c1", "controlTitle": "MP-2.1.3 - Learning Tasks Review and Updates", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21051, "controlIdentifier": "MP-2.2.1", "controlGuid": "a7c23dad-8ef7-5ee8-99da-1d7b960e0162", "controlTitle": "MP-2.2.1 - AI Usage and Boundary Documentation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21052, "controlIdentifier": "MP-2.2.2", "controlGuid": "134995b4-37f7-56dd-b339-a98ef1b50b5b", "controlTitle": "MP-2.2.2 - AI Interdependencies and Dependencies", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21053, "controlIdentifier": "MP-2.3.1", "controlGuid": "c625ff86-c0e1-59f4-9249-472637047bef", "controlTitle": "MP-2.3.1 - Development and Operation Documentation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21054, "controlIdentifier": "MP-2.3.2", "controlGuid": "96b0ff9e-ec50-574f-97a0-a9a3fd0857f3", "controlTitle": "MP-2.3.2 - TEVV Protocols and Standards", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21055, "controlIdentifier": "MP-2.3.3", "controlGuid": "e008abf1-ca9b-5b2b-ae0d-bf8d87906a61", "controlTitle": "MP-2.3.3 - Experimental Design and Statistical Methods", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21056, "controlIdentifier": "MP-2.3.4", "controlGuid": "cb1494eb-6863-53e4-a126-70f655465ce2", "controlTitle": "MP-2.3.4 - Validation Metrics and Rationale", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21057, "controlIdentifier": "MP-2.3.5", "controlGuid": "109190fc-92ba-5596-9292-212edf1071e0", "controlTitle": "MP-2.3.5 - Design and Deployment Validation Feedback", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21058, "controlIdentifier": "MP-2.3.6", "controlGuid": "2898c737-e635-5c72-a5f2-de8f9c42fcfb", "controlTitle": "MP-2.3.6 - Testing Limits and Constraints", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21059, "controlIdentifier": "MP-3.1.1", "controlGuid": "a70fce84-73d4-56a5-9447-679f2e51579f", "controlTitle": "MP-3.1.1 - AI Design and Deployment Alignment", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21060, "controlIdentifier": "MP-3.1.2", "controlGuid": "f931d3e5-ac56-5463-af5e-f240156fd500", "controlTitle": "MP-3.1.2 - Impact Feedback from Multidisciplinary Teams", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21061, "controlIdentifier": "MP-3.1.3", "controlGuid": "49507a33-1154-5b26-829d-4f557dd9066d", "controlTitle": "MP-3.1.3 - User Interface and Interpretability Design", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21062, "controlIdentifier": "MP-3.2.1", "controlGuid": "a23412b3-dc5b-5a58-9aac-261042ad281f", "controlTitle": "MP-3.2.1 - AI System Justification and Cost-Benefit", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21063, "controlIdentifier": "MP-3.2.2", "controlGuid": "f77a0add-3868-52e7-a9e8-bbf3c12112f1", "controlTitle": "MP-3.2.2 - Cost and Impact Assessment", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21064, "controlIdentifier": "MP-3.3.1", "controlGuid": "c2203e69-004d-5acf-80c6-6f39c443f3ce", "controlTitle": "MP-3.3.1 - AI Application Scope Definition", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21065, "controlIdentifier": "MP-3.4.1", "controlGuid": "b09467ce-105d-5555-ba62-e7f44ba3847d", "controlTitle": "MP-3.4.1 - Operator and Practitioner Proficiency Levels", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21066, "controlIdentifier": "MP-3.4.2", "controlGuid": "d4b7a1a7-ada0-587c-a643-7bf229f23c5d", "controlTitle": "MP-3.4.2 - Proficiency Assessment and Maintenance Plan", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21068, "controlIdentifier": "MP-3.5.1", "controlGuid": "771ed94d-5ff7-510a-b96c-9840e4749fba", "controlTitle": "MP-3.5.1 - Human Oversight Roles and Responsibilities", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21069, "controlIdentifier": "MP-3.5.2", "controlGuid": "9d5c6372-9160-5cdb-95c6-961b8916f8e5", "controlTitle": "MP-3.5.2 - Oversight Training and Resources", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21070, "controlIdentifier": "MP-3.5.3", "controlGuid": "0fb077d1-a93c-5f1a-8628-01b84e1a4f87", "controlTitle": "MP-3.5.3 - Criteria and Thresholds for Intervention", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21071, "controlIdentifier": "MP-3.5.4", "controlGuid": "ac5b757e-4955-5f47-b50c-b11fe0562d49", "controlTitle": "MP-3.5.4 - Oversight Effectiveness Evaluation and Improvement", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21072, "controlIdentifier": "MP-4.1.1", "controlGuid": "18f43531-3eef-5a98-acc8-0921547c2f23", "controlTitle": "MP-4.1.1 - Legal Risk Management Processes", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21073, "controlIdentifier": "MP-4.1.2", "controlGuid": "c013b21e-e966-5920-ae06-f705b95e24ee", "controlTitle": "MP-4.1.2 - Third-Party Resource Documentation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21074, "controlIdentifier": "MP-4.1.3", "controlGuid": "f2e6c406-eb55-5573-949e-f3ac6ed29f2c", "controlTitle": "MP-4.1.3 - Legal Risk Communication and Updates", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21075, "controlIdentifier": "MP-4.2.1", "controlGuid": "c3460c29-14a3-525a-bf49-4f21ac728b2b", "controlTitle": "MP-4.2.1 - Internal Controls for AI Components", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21076, "controlIdentifier": "MP-4.2.2", "controlGuid": "82a5463b-2e82-5f08-82b8-a8010b8786b2", "controlTitle": "MP-4.2.2 - Controls Effectiveness and Incident Response", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21077, "controlIdentifier": "MP-5.1.1", "controlGuid": "ca7d8c4b-9a05-5277-ba2c-7f8e5fcdf4eb", "controlTitle": "MP-5.1.1 - AI Risk Identification, Assessment, and Prioritization", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21078, "controlIdentifier": "MP-5.1.2", "controlGuid": "35304506-9dd2-595c-ae37-b4a2a3ad85ee", "controlTitle": "MP-5.1.2 - AI Risk Profile Development", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21079, "controlIdentifier": "MP-5.1.3", "controlGuid": "c6048752-3bed-54d6-99c6-ff966d4a0669", "controlTitle": "MP-5.1.3 - Decision Rationale and Stakeholder Validation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21080, "controlIdentifier": "MP-5.2.1", "controlGuid": "fb238f67-3882-5d5a-a8fc-e38daea6523b", "controlTitle": "MP-5.2.1 - Structured AI stakeholder Engagement", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21081, "controlIdentifier": "MP-5.2.2", "controlGuid": "4fd63e8f-7a14-5124-9ab2-72c4eddc3a54", "controlTitle": "MP-5.2.2 - Stakeholder Engagement and Mitigation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21082, "controlIdentifier": "MS-1.1.1", "controlGuid": "9c26e0b9-2f1c-56e2-aa29-3e19636d34e3", "controlTitle": "MS-1.1.1 - AI Risk Metrics and Measurement Selection", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21083, "controlIdentifier": "MS-1.1.2", "controlGuid": "e69db1ff-87cf-5493-9814-6abeb4fb602f", "controlTitle": "MS-1.1.2 - Unmeasurable Risks and Rationale Documentation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21084, "controlIdentifier": "MS-1.2.1", "controlGuid": "c4554cdd-9c94-5f19-b70b-0d63c529eed3", "controlTitle": "MS-1.2.1 - Error and Incident Data Analysis", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21085, "controlIdentifier": "MS-1.3.1", "controlGuid": "36450643-f257-58e3-a54e-9be2e0f60a59", "controlTitle": "MS-1.3.1 - Independent Expert Evaluation and Stakeholder Consultation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21086, "controlIdentifier": "MS-2.1.1", "controlGuid": "2be98eec-17d9-5c00-9e61-62150052ac6b", "controlTitle": "MS-2.1.1 - TEVV Test Data and Metrics Documentation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21087, "controlIdentifier": "MS-2.1.2", "controlGuid": "e53186d0-24ab-5faf-924a-d103ac7b3e13", "controlTitle": "MS-2.1.2 - 2. TEVV Tools and Configuration Documentation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21088, "controlIdentifier": "MS-2.1.3", "controlGuid": "f95eb3da-30f2-5fc0-b8c2-f670164b0a9f", "controlTitle": "MS-2.1.3 - Centralized TEVV Repository and Access", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21089, "controlIdentifier": "MS-2.2.1", "controlGuid": "e8e4acfd-ba63-5651-8b53-68af609c2063", "controlTitle": "MS-2.2.1 - Human Subject Use and Consent", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21090, "controlIdentifier": "MS-2.2.2", "controlGuid": "9ba50102-89c9-5701-99de-5265ad9a6d03", "controlTitle": "MS-2.2.2 - Representation and Recruitment Process", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21091, "controlIdentifier": "MS-2.2.3", "controlGuid": "bc1dee07-88d0-5068-bcc0-a82d4fed61db", "controlTitle": "MS-2.2.3 - Adverse Event Monitoring and Review", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21092, "controlIdentifier": "MS-2.3.1", "controlGuid": "f16fae9f-6d40-5248-954f-9666a4f61eab", "controlTitle": "MS-2.3.1 - Performance and Assurance Criteria", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21093, "controlIdentifier": "MS-2.3.2", "controlGuid": "d5d1e762-d6a1-5e09-9e09-b78180f53fba", "controlTitle": "MS-2.3.2 - Measurement Methods and Results", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21094, "controlIdentifier": "MS-2.3.3", "controlGuid": "059453f9-8eb2-51ca-9f5a-4d581891ac52", "controlTitle": "MS-2.3.3 - Performance Analysis and Trends", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21095, "controlIdentifier": "MS-2.3.4", "controlGuid": "24bcbc57-ef94-5d35-b1c6-20b82f8f2cdf", "controlTitle": "MS-2.3.4 - Performance Under Realistic Conditions", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21096, "controlIdentifier": "MS-2.4.1", "controlGuid": "93bf274e-4a94-5945-bd4a-35060e81e6ce", "controlTitle": "MS-2.4.1 - AI Monitoring and Anomaly Detection", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21097, "controlIdentifier": "MS-2.4.2", "controlGuid": "e7593cc5-b408-58f0-ba17-b79ff2078e18", "controlTitle": "MS-2.4.2 - Performance Tracking and Improvement", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21098, "controlIdentifier": "MS-2.4.3", "controlGuid": "1b22add2-c9b2-5417-9503-fca51014b13a", "controlTitle": "MS-2.4.3 - AI Monitoring Integration", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21099, "controlIdentifier": "MS-2.4.4", "controlGuid": "bde43a2c-8c76-51ac-a306-a1580dda56c3", "controlTitle": "MS-2.4.4 - Incident Investigation and Root Cause Analysis", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21100, "controlIdentifier": "MS-2.5.1", "controlGuid": "f86df5f3-5d99-51e3-b707-4f52cc8544e3", "controlTitle": "MS-2.5.1 - Validation and Reliability Testing Process", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21101, "controlIdentifier": "MS-2.5.2", "controlGuid": "9eec4483-3833-5d89-9e8f-5a82cbf645c0", "controlTitle": "MS-2.5.2 - Validation Results and Improvement", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21103, "controlIdentifier": "MS-2.6.1", "controlGuid": "274f0d79-864d-5321-8cfe-b67447d42d48", "controlTitle": "MS-2.6.1 - Safety Risk Assessments and Stress Testing", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21104, "controlIdentifier": "MS-2.6.2", "controlGuid": "57a0e79b-69bc-52fa-83ae-25ef003d08a6", "controlTitle": "MS-2.6.2 - Controlled Failures and Fail-Safe Mechanisms", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21105, "controlIdentifier": "MS-2.7.1", "controlGuid": "d52020f7-cb44-5cef-bcca-45f770471a53", "controlTitle": "MS-2.7.1 - Security and Resilience Improvement Process", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21106, "controlIdentifier": "MS-2.7.2", "controlGuid": "b1c0ff9f-d00f-5335-9835-41ef72bc043e", "controlTitle": "MS-2.7.2 - AI Security and Resilience Testing", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21109, "controlIdentifier": "MS-2.8.1", "controlGuid": "45870ed8-f867-52ee-8c9c-981493b9bc40", "controlTitle": "MS-2.8.1 - AI Transparency and Accountability Evaluation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21110, "controlIdentifier": "MS-2.8.2", "controlGuid": "574691de-c1f8-5796-9b63-50e833bfb1d9", "controlTitle": "MS-2.8.2 - Metrics for Transparency and Accountability", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21111, "controlIdentifier": "MS-2.9.1", "controlGuid": "f84daaad-dc2f-5e0a-98b6-593bf45d1693", "controlTitle": "MS-2.9.1 - Model Explainability and Validation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21112, "controlIdentifier": "MS-2.9.2", "controlGuid": "673d2dec-ae3a-5af5-b9a5-be3e8a67e3c1", "controlTitle": "MS-2.9.2 - Interpretability and Decision Context", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21113, "controlIdentifier": "MS-2.10.1", "controlGuid": "56278365-e398-536f-a25b-7f6417fdfd80", "controlTitle": "MS-2.10.1 - Initial Privacy Risk Assessment", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21114, "controlIdentifier": "MS-2.10.2", "controlGuid": "2f285beb-e7b4-5a1f-9836-6e5fdec08da0", "controlTitle": "MS-2.10.2 - Ongoing AI Privacy Risk Assessment, Monitoring, and Verification", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21115, "controlIdentifier": "MS-2.10.3", "controlGuid": "af43cba7-e935-58da-991c-86a2abc7cc47", "controlTitle": "MS-2.10.3 - Data Consent and Management", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21116, "controlIdentifier": "MS-2.11.1", "controlGuid": "1745df28-9e5e-55cd-8e0f-a3e0a243eb07", "controlTitle": "MS-2.11.1 - Context-Specific Fairness and Bias Evaluation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21117, "controlIdentifier": "MS-2.12.1", "controlGuid": "6b7f41e6-ac53-5c28-adff-ef3075f51e10", "controlTitle": "MS-2.12.1 - AI Resource Efficiency Assessment", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21118, "controlIdentifier": "MS-2.12.2", "controlGuid": "ddb3e672-2a47-5193-92dd-c86592440f87", "controlTitle": "MS-2.12.2 - Metrics and Monitoring of AI Resource Efficiency", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21119, "controlIdentifier": "MS-2.12.3", "controlGuid": "05399934-73bf-50dc-8825-b8bb83204c1d", "controlTitle": "MS-2.12.3 - Optimization Strategies for AI Resource Efficiency", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21120, "controlIdentifier": "MS-2.13.1", "controlGuid": "a1e8863a-770b-5e97-845f-9573d50b1919", "controlTitle": "MS-2.13.1 - TEVV Process Review and Continuous Improvement", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21121, "controlIdentifier": "MS-2.13.2", "controlGuid": "9e7f2e0f-5d57-5109-819a-d947c46257a2", "controlTitle": "MS-2.13.2 - TEVV Metrics Analysis", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21122, "controlIdentifier": "MS-2.13.3", "controlGuid": "d4b1eebd-552a-5d5c-ada3-0cc468083d37", "controlTitle": "MS-2.13.3 - Cost-Effectiveness and Optimization of TEVV", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21123, "controlIdentifier": "MS-3.1.1", "controlGuid": "011b2c80-c4fa-579f-8804-962abeec7b9b", "controlTitle": "MS-3.1.1 - AI Risk Tracking and Resource Allocation", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21124, "controlIdentifier": "MS-3.1.2", "controlGuid": "8ee2f0ca-4f4e-5010-a498-9829da7935fb", "controlTitle": "MS-3.1.2 - AI Risk Documentation and Review", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21125, "controlIdentifier": "MS-3.2.1", "controlGuid": "9978b494-9fbb-5d3a-b010-67be49351056", "controlTitle": "MS-3.2.1 - Measurement Technique Gap Analysis", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21126, "controlIdentifier": "MS-3.2.2", "controlGuid": "e88af6b4-a3e6-54ed-9e1e-f3de1c83390b", "controlTitle": "MS-3.2.2 - Pilot Studies and Approach Refinement", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21127, "controlIdentifier": "MS-3.2.3", "controlGuid": "72309949-99e5-50eb-b034-f2344600157c", "controlTitle": "MS-3.2.3 - Long-term Impact Evaluation Framework", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21128, "controlIdentifier": "MS-3.3.1", "controlGuid": "0f0d8d8c-d11f-5e56-a7e4-57289ea3504f", "controlTitle": "MS-3.3.1 - Feedback and Appeals Processes", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21129, "controlIdentifier": "MS-3.3.2", "controlGuid": "55d09b13-78e0-5fd7-a6c8-84d7e67f4286", "controlTitle": "MS-3.3.2 - Feedback Integration and Process Refinement", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21130, "controlIdentifier": "MS-4.1.1", "controlGuid": "48349781-323b-51f4-8567-9479ce4431da", "controlTitle": "MS-4.1.1 - Context-Specific Risk Identification", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21131, "controlIdentifier": "MS-4.1.2", "controlGuid": "d3e47e69-f156-5d0b-9baf-cc2fffa5752a", "controlTitle": "MS-4.1.2 - Integration with Organizational Processes", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21132, "controlIdentifier": "MS-4.1.3", "controlGuid": "de95e405-269e-5a2e-90c0-a1580c8e0cef", "controlTitle": "MS-4.1.3 - Incorporating Real-World Data", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21133, "controlIdentifier": "MS-4.1.4", "controlGuid": "fa9f2089-73a1-5c5c-bebb-3c4096969cf9", "controlTitle": "MS-4.1.4 - Validation, Testing, and Effectiveness Evaluation of AI Risk Approaches", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21134, "controlIdentifier": "MS-4.2.1", "controlGuid": "61e21333-d50f-52dc-9a48-e4403e65e6dd", "controlTitle": "MS-4.2.1 - Benefits and Performance Assessment", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21135, "controlIdentifier": "MS-4.2.2", "controlGuid": "af9966f2-7589-5c57-a9f0-5eb2c2369589", "controlTitle": "MS-4.2.2 - Performance Validation via Stakeholder Input", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21136, "controlIdentifier": "MS-4.2.3", "controlGuid": "da11a486-5912-577e-97ca-dc660703d56d", "controlTitle": "MS-4.2.3 - Analysis of Performance and Trustworthiness Trends", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21137, "controlIdentifier": "MS-4.2.4", "controlGuid": "1ecb03f8-b758-5879-ba5c-f2dd291d1534", "controlTitle": "MS-4.2.4 - Continuous Improvement of AI Trustworthiness", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21138, "controlIdentifier": "MS-4.3.1", "controlGuid": "d67db646-bc2a-5d6d-bee2-f427d861b793", "controlTitle": "MS-4.3.1 - Stakeholder Feedback on Performance", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21139, "controlIdentifier": "MS-4.3.2", "controlGuid": "940bcff8-ecd2-5e8b-9b08-423c948e78d2", "controlTitle": "MS-4.3.2 - Root Cause Analysis and Action Plans", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21140, "controlIdentifier": "MS-4.3.3", "controlGuid": "86651ce9-0a10-5a75-a0a7-7ebbc589d764", "controlTitle": "MS-4.3.3 - Knowledge Sharing and Industry Contribution", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21141, "controlIdentifier": "MG-1.1.1", "controlGuid": "9dd63238-e951-5419-824a-23269bdd64c7", "controlTitle": "MG-1.1.1 - AI System Evaluation and Gap Analysis", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21142, "controlIdentifier": "MG-1.1.2", "controlGuid": "6fcbfac7-6ac7-5a94-baca-626ef7628c48", "controlTitle": "MG-1.1.2 - Go/No-Go Decision Criteria", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21146, "controlIdentifier": "MG-1.3.2", "controlGuid": "f6a257ba-302c-5c16-915a-c62ebea64df2", "controlTitle": "MG-1.3.2 - Responsibility and Decision Criteria", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21148, "controlIdentifier": "MG-1.4.2", "controlGuid": "4704bc57-de42-5e43-95ed-18c0ef680662", "controlTitle": "MG-1.4.2 - Guidance for Downstream Stakeholders", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21149, "controlIdentifier": "MG-1.4.3", "controlGuid": "4c12cc72-abd8-5845-a478-7b83b1918080", "controlTitle": "MG-1.4.3 - Regular Residual Risk Reviews", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21153, "controlIdentifier": "MG-2.1.3", "controlGuid": "73e1a815-54c8-5505-a13d-fbd99d59bba0", "controlTitle": "MG-2.1.3 - Resource Effectiveness Monitoring", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21154, "controlIdentifier": "MG-2.2.1", "controlGuid": "1d4d6c30-4861-59bc-a4d5-b6f7c15526ae", "controlTitle": "MG-2.2.1 - Ongoing AI Performance and Trustworthiness Monitoring", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21155, "controlIdentifier": "MG-2.2.2", "controlGuid": "79eaeb4d-a362-52f0-b81d-803849f0339b", "controlTitle": "MG-2.2.2 - Feedback-Driven System Optimization", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21156, "controlIdentifier": "MG-2.2.3", "controlGuid": "e3ac25ee-29d3-5959-9053-95c6a3ce4b4a", "controlTitle": "MG-2.2.3 - Risk Control Effectiveness Review", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21157, "controlIdentifier": "MG-2.3.1", "controlGuid": "baf91c58-3e4a-5cf8-a53d-054b45b7d903", "controlTitle": "MG-2.3.1 - Monitoring and Responding to Emergent AI Risks", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21158, "controlIdentifier": "MG-2.3.2", "controlGuid": "35aefa98-7b0c-5730-ad3b-e35c74df0b3d", "controlTitle": "MG-2.3.2 - Emergent Risk Stakeholder Communication and Transparency", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21159, "controlIdentifier": "MG-2.3.3", "controlGuid": "e52400fa-d6a3-558a-916b-498b0d128643", "controlTitle": "MG-2.3.3 - AI Risk Response Team and Training", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21160, "controlIdentifier": "MG-2.4.1", "controlGuid": "e6e1100c-31ae-5bb9-8088-a9891954b916", "controlTitle": "MG-2.4.1 - Performance Monitoring and Action Triggers", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21163, "controlIdentifier": "MG-3.1.1", "controlGuid": "aa6927ee-f872-5c6a-9d32-e783367cb933", "controlTitle": "MG-3.1.1 - Third-Party Practitioner Training and Collaboration", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21174, "controlIdentifier": "MG-4.1.5", "controlGuid": "da55e432-fd38-5251-b54e-f2866ea46ff6", "controlTitle": "MG-4.1.5 - Safety Metrics and Incident Response", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" }, { "profileMappingId": 0, "controlId": 21183, "controlIdentifier": "MG-4.3.5", "controlGuid": "b6df3016-de93-5ee6-ac6b-0563102ad1b7", "controlTitle": "MG-4.3.5 - Authorized Information Sharing and Lessons Learned", "catalogId": 1045, "catalogGuid": "67461320-7abc-5c3c-b46a-ae6634578800", "catalogTitle": "CRI FS AI RMF v1.0", "catalogUrl": "https://cyberriskinstitute.org/" } ], "exportDate": "", "exportVersion": "1.0" }