AITBM

TIER 3 · THREAT-DEFENSE PLANNING

COMPASS to AITBM Mapping

Uses COMPASS threat classes to plan AITBM evidence collection without transferring priority or maturity values into scores.

Ro-1Cn-1Cn-3Pr-1Pr-2Pr-4Tr-4Ro-4

How to use this crosswalk

External requirements, controls, threats, and practices identify evidence to collect or tests to run. Only measured evidence from the assessed deployment determines AITBM rubric placements, IVP, ORP, ACI, MVT findings, and ERS.

Changed-framework carriers reconciled 2026-09-21; stable-framework currency basis carried forward from 2026-09-09. No endorsement by the external framework owner is implied.

COMPASS

Threat-defense planning

OWASP Threat Defense COMPASS · OWASP GenAI Security Project

COMPASS structures threat-defense analysis and prioritization. Its threat classes may select tests, but Likelihood, Impact, OODA records, maturity language, and register priority never write back to an AITBM IVP anchor, ORP dimension, ACI term, pathway, CRM, ERS, or severity.

Legacy COMPASS labelCurrent semantic identityConditional AITBM targetsBoundary
LLM01 Prompt InjectionLLM01:2026Ro-1, Cn-1, Cn-3; AsMeasured injection and boundary evidence only.
LLM02 Sensitive Information DisclosureLLM02:2026Pr-1, Pr-2, Pr-4Measured disclosure evidence only.
LLM03 Supply ChainLLM04:2026Tr-4, Ro-4; PcMeasured supply-chain provenance evidence only.
LLM04 Data and Model PoisoningLLM05:2026Ro-4, Ro-2, Tr-3, Tr-4Measured poisoning and lineage evidence only.
LLM05 Improper Output HandlingLLM10:2026Cn-3, Cn-1, Cn-6, Ro-1Measured output admission and reversibility evidence only.
LLM06 Excessive AgencyLLM03:2026Cn-1, Cn-2, Cn-5, Cn-6, Cn-7; AaTested authority and containment evidence only.
LLM07 System Prompt LeakageLLM08:2026 Hidden Context ExposurePr-1, Cn-1, Cn-3, Tr-3Measured hidden-context exposure evidence only.
LLM08 Vector and Embedding WeaknessesLLM09:2026Pr-2, Ro-4, Pr-3, Pr-4, Cn-1Measured vector/embedding boundary evidence only.
LLM09 MisinformationLLM07:2026Ro-3, Tr-1, Tr-2Measured consistency, explanation, and calibration evidence only.
LLM10 Unbounded ConsumptionLLM06:2026Cn-7; As, AaMeasured budget, termination, and deployment-context evidence only.

COMPASS T8 conditionally supports Tr-3 only when audit completeness is demonstrated. A priority label or a completed COMPASS workflow cannot replace the assessed system, dependency graph, test result, evidence date, or AITBM scoring rule.

COMPASS reference →