Dedicated crosswalks
Each has its own canonical URL and explicit evidence boundary.
EVIDENCE CROSSWALKS
AI security framework mappings
Sixteen external threat taxonomies, control standards, regulations, certification regimes, and maturity models mapped to AITBM evidence and test-selection targets. External frameworks never set an AITBM score by themselves.
Shared sub-metrics
The measurement substrate that external evidence may support.
Automatic score conversions
Controls and compliance labels never carry a generic ERS delta.
Tier 1
Core threat, control, and certification references most directly connected to AITBM assessment.
OWASP Top 10 for LLMs
Vulnerability catalogueRoutes the released OWASP LLM risks to AITBM tests and evidence without assigning generic risk scores.
Ro-1Cn-1Cn-2Cn-3Cn-6Pr-1
Open full crosswalk →OWASP Agentic AI Threats and Mitigations
Agentic threat taxonomyMaps agentic threats and the companion Top 10 to AITBM containment, robustness, privacy, and operational-risk evidence.
Ro-4Cn-1Cn-2Cn-7Ro-3Tr-2
Open full crosswalk →OWASP AISVS
Control verification standardShows how AISVS control-verification results can supply evidence for AITBM's 23 measured sub-metrics.
Ro-4Tr-4Pr-1Ro-1Cn-1Cn-3
Open full crosswalk →MITRE ATLAS
Adversarial threat knowledge baseUses released ATLAS tactics and techniques to select AITBM tests while keeping system scoring deployment-specific.
Pr-1Pr-2Tr-4Ro-1Ro-4Tr-3
Open full crosswalk →AIUC-1
Certification and insurance standardRelates AIUC-1 requirements to AITBM evidence, assurance, and operational-risk inputs without treating certification as a score.
Pr-1Pr-2Pr-3Pr-4Ro-1Cn-1
Open full crosswalk →AIDEFEND
Defensive technique catalogueConnects defensive techniques to the AITBM sub-metrics they may evidence when deployed effectiveness is measured.
Tr-4Ro-4Cn-1Cn-2Cn-5Cn-6
Open full crosswalk →Tier 2
Governance, regulatory, and cloud-security frameworks that broaden deployment and assurance evidence.
NIST AI RMF
Risk management frameworkMaps GOVERN, MAP, MEASURE, and MANAGE activities to AITBM assessment evidence and decision outputs.
Ro-2Ro-3Tr-2Cn-1Cn-3Cn-2
Open full crosswalk →ISO/IEC 42001 and 42005
AI management and impact assessmentRelates management-system and impact-assessment evidence to AITBM scoring, governance, and assurance inputs.
Tr-3Tr-4
Open full crosswalk →EU AI Act
Binding regulationMaps relevant legal obligations to evidence routes while making clear that AITBM is not a legal-compliance determination.
Pr-1Pr-3Pr-4Fa-3Tr-4Tr-3
Open full crosswalk →CSA AI Security
Cloud AI security frameworkConnects CSA MAESTRO and AICM controls to AITBM test selection and deployment evidence.
Ro-1Ro-4Pr-1Pr-2Tr-4Pr-3
Open full crosswalk →Tier 3
Maturity, cyber-profile, defense, and prior-art frameworks that support specialized assessment needs.
NIST Cyber AI Profile (IR 8596)
Cyber-AI CSF profileRelates the Cyber AI Profile's outcomes to AITBM's measured properties, context, and evidence confidence.
Ro-1Ro-4Cn-1Cn-2Cn-4Pr-1
Open full crosswalk →OWASP AIMA
AI security maturity modelShows how maturity practices can support AITBM evidence without converting maturity levels directly into ERS.
Fa-1Fa-2Fa-3Fa-4Tr-1Tr-3
Open full crosswalk →COMPASS
Security maturity and prioritizationMaps COMPASS practices to AITBM threat prioritization, evidence collection, and scoring inputs.
Ro-1Cn-1Pr-1Pr-4Cn-2Cn-5
Open full crosswalk →MITRE D3FEND
Defensive countermeasure ontologyUses defensive countermeasures to organize evidence routes while AITBM tests determine the actual score.
Tr-4Cn-1Ro-1Cn-3Cn-5Cn-4
Open full crosswalk →CVSS
Vulnerability scoring prior artExplains where CVSS complements AITBM and why AI system risk still requires multidimensional and confidence-aware assessment.
Pr-1Pr-2Pr-4Cn-3Ro-3Ro-4
Open full crosswalk →Tier 4
Additional governance guidance with narrower but useful evidence relationships.