unified
UC-AI-21 — Commission independent third-party AI evaluations on a quarterly cadence
Engage an independent evaluator at least quarterly to test each in-scope AI system against its defined risk categories: adversarial robustness and jailbreak resistance, harmful and out-of-scope outputs, agent-specific high-risk outputs, hallucination rates, and unsafe or unauthorized tool calls. Fix the test scope and pass thresholds in advance, track every finding to remediation and retest, and retain evaluator reports, methodologies, and remediation evidence.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- AI Governance
- type
- detective
- category
- administrative
Details
- unified_id
- UC-AI-21
- title
- Commission independent third-party AI evaluations on a quarterly cadence
- statement
- Engage an independent evaluator at least quarterly to test each in-scope AI system against its defined risk categories: adversarial robustness and jailbreak resistance, harmful and out-of-scope outputs, agent-specific high-risk outputs, hallucination rates, and unsafe or unauthorized tool calls. Fix the test scope and pass thresholds in advance, track every finding to remediation and retest, and retain evaluator reports, methodologies, and remediation evidence.
- domain
- AI Governance
- control_type
- detective
- control_category
- administrative
- members
- framework
- aiuc-1
- control_id
- B001
- coverage
- full
- relationship
- superset_of
- framework
- aiuc-1
- control_id
- C010
- coverage
- full
- relationship
- superset_of
- framework
- aiuc-1
- control_id
- C011
- coverage
- full
- relationship
- superset_of
- framework
- aiuc-1
- control_id
- C012
- coverage
- full
- relationship
- superset_of
- framework
- aiuc-1
- control_id
- D002
- coverage
- full
- relationship
- superset_of
- framework
- aiuc-1
- control_id
- D004
- coverage
- full
- relationship
- superset_of
- guidance
Source
No record-specific source URL is provided.
Connections
- UC-AI-21 — Commission independent third-party AI evaluations on a quarterly cadence maps_to C010 — Third-party testing for harmful outputs
- framework
- aiuc-1
- control_id
- C010
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- July 15, 2026 release (quarterly update cadence)
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-AI-21 — Commission independent third-party AI evaluations on a quarterly cadence maps_to C012 — Third-party testing for customer-defined risk
- framework
- aiuc-1
- control_id
- C012
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- July 15, 2026 release (quarterly update cadence)
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-AI-21 — Commission independent third-party AI evaluations on a quarterly cadence mitigates Adversarial attacks, data poisoning and prompt injection
- strength
- primary
- rationale
- Quarterly independent adversarial-robustness and jailbreak testing is the assurance that injection defenses actually hold.
- UC-AI-21 — Commission independent third-party AI evaluations on a quarterly cadence mitigates Model/data drift and inadequate post-deployment monitoring
- strength
- related
- rationale
- A recurring quarterly evaluation cadence catches degradation between releases that internal monitoring misses.
- UC-AI-21 — Commission independent third-party AI evaluations on a quarterly cadence mitigates Inaccurate, unreliable or hallucinated AI outputs
- strength
- related
- rationale
- Independent hallucination-rate testing measures whether reliability controls are effective.
- Quarterly Third-Party AI Evaluation Cycle operates UC-AI-21 — Commission independent third-party AI evaluations on a quarterly cadence
- UC-AI-21 — Commission independent third-party AI evaluations on a quarterly cadence maps_to D002 — Third-party testing for hallucinations
- framework
- aiuc-1
- control_id
- D002
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- July 15, 2026 release (quarterly update cadence)
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-AI-21 — Commission independent third-party AI evaluations on a quarterly cadence maps_to C011 — Third-party testing for out-of-scope outputs
- framework
- aiuc-1
- control_id
- C011
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- July 15, 2026 release (quarterly update cadence)
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-AI-21 — Commission independent third-party AI evaluations on a quarterly cadence mitigates AI endpoint abuse, scraping and model extraction
- strength
- related
- rationale
- Adversarial-robustness testing includes extraction and over-disclosure probes against the endpoints.
- UC-AI-21 — Commission independent third-party AI evaluations on a quarterly cadence maps_to D004 — Third-party testing of tool calls
- framework
- aiuc-1
- control_id
- D004
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- July 15, 2026 release (quarterly update cadence)
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-AI-21 — Commission independent third-party AI evaluations on a quarterly cadence maps_to B001 — Third-party testing of adversarial robustness
- framework
- aiuc-1
- control_id
- B001
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- July 15, 2026 release (quarterly update cadence)
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-AI-21 — Commission independent third-party AI evaluations on a quarterly cadence mitigates Unauthorized or unsafe autonomous agent actions and tool calls
- strength
- related
- rationale
- Independent testing of tool calls surfaces unsafe or unauthorized agent actions before customers do.