{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","contextIds":["risk:ai-accountability-liability","risk:ai-adversarial-poisoning-attacks","risk:ai-agent-unauthorized-actions","risk:ai-bias-discrimination","risk:ai-catastrophic-cyber-misuse","risk:ai-emergent-integration-risk","risk:ai-gpai-systemic-transparency","risk:ai-highrisk-biometrics","risk:ai-highrisk-critical-infra","risk:ai-highrisk-education","risk:ai-highrisk-employment","risk:ai-highrisk-essential-services","risk:ai-highrisk-justice-democracy","risk:ai-highrisk-law-enforcement","risk:ai-highrisk-migration-border"],"directIds":["ctrl:eu-ai-act:AIA-Art10","ctrl:eu-ai-act:AIA-Art11","ctrl:eu-ai-act:AIA-Art12","ctrl:eu-ai-act:AIA-Art13","ctrl:eu-ai-act:AIA-Art14","ctrl:eu-ai-act:AIA-Art15","ctrl:eu-ai-act:AIA-Art16","ctrl:eu-ai-act:AIA-Art17","ctrl:eu-ai-act:AIA-Art18","ctrl:eu-ai-act:AIA-Art19","ctrl:eu-ai-act:AIA-Art20","ctrl:eu-ai-act:AIA-Art21-22","ctrl:eu-ai-act:AIA-Art23-25","ctrl:eu-ai-act:AIA-Art26","ctrl:eu-ai-act:AIA-Art27","ctrl:eu-ai-act:AIA-Art43","ctrl:eu-ai-act:AIA-Art47-49","ctrl:eu-ai-act:AIA-Art5","ctrl:eu-ai-act:AIA-Art50","ctrl:eu-ai-act:AIA-Art53","ctrl:eu-ai-act:AIA-Art55","ctrl:eu-ai-act:AIA-Art6-7","ctrl:eu-ai-act:AIA-Art72","ctrl:eu-ai-act:AIA-Art73","ctrl:eu-ai-act:AIA-Art9"],"kind":"bundle","metadata":"/assets/agent_metadata.5c7612c9c5b0b455.json","name":"EU AI Act","next":"/assets/agent_sources-eu-ai-act-2.51ae04ee50f6bfe4.json","page":1,"pageSize":40,"records":[{"attributes":{"category":"administrative","framework":"eu-ai-act","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"Data and data governance (high-risk)","details":{"automation":"manual","control_category":"administrative","control_id":"AIA-Art10","control_type":"preventive","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":8,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art10-76043f54.html","id":"ctrl:eu-ai-act:AIA-Art10","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art10","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art10 — Data and data governance (high-risk)","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art10-76043f54.f0ee0bea6ec090fe.json"},{"attributes":{"category":"administrative","framework":"eu-ai-act","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"Technical documentation (high-risk)","details":{"automation":"manual","control_category":"administrative","control_id":"AIA-Art11","control_type":"preventive","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art11-6286951e.html","id":"ctrl:eu-ai-act:AIA-Art11","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art11","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art11 — Technical documentation (high-risk)","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art11-6286951e.998ed97143554ab2.json"},{"attributes":{"category":"technical","framework":"eu-ai-act","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"Record-keeping / logging (high-risk)","details":{"automation":"automated","control_category":"technical","control_id":"AIA-Art12","control_type":"detective","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":true,"requirement_frequency":null,"requirement_status":null,"risk_count":6,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art12-3714b8af.html","id":"ctrl:eu-ai-act:AIA-Art12","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art12","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art12 — Record-keeping / logging (high-risk)","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art12-3714b8af.118bd0f6a3053147.json"},{"attributes":{"category":"administrative","framework":"eu-ai-act","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"Transparency and provision of information to deployers (high-risk)","details":{"automation":"manual","control_category":"administrative","control_id":"AIA-Art13","control_type":"preventive","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":6,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art13-bee2028e.html","id":"ctrl:eu-ai-act:AIA-Art13","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art13","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art13 — Transparency and provision of information to deployers (high-risk)","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art13-bee2028e.38dfba7e31c5462c.json"},{"attributes":{"category":"administrative","framework":"eu-ai-act","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"Human oversight (high-risk)","details":{"automation":"manual","control_category":"administrative","control_id":"AIA-Art14","control_type":"preventive","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":6,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art14-4b7ae8a7.html","id":"ctrl:eu-ai-act:AIA-Art14","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art14","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art14 — Human oversight (high-risk)","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art14-4b7ae8a7.6e174455a15db2b7.json"},{"attributes":{"category":"technical","framework":"eu-ai-act","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"Accuracy, robustness and cybersecurity (high-risk)","details":{"automation":"hybrid","control_category":"technical","control_id":"AIA-Art15","control_type":"preventive","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":8,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art15-c3704411.html","id":"ctrl:eu-ai-act:AIA-Art15","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art15","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art15 — Accuracy, robustness and cybersecurity (high-risk)","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art15-c3704411.8feee43381f296a4.json"},{"attributes":{"category":"administrative","framework":"eu-ai-act","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"Obligations of providers of high-risk AI systems","details":{"automation":"manual","control_category":"administrative","control_id":"AIA-Art16","control_type":"preventive","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art16-63a82efa.html","id":"ctrl:eu-ai-act:AIA-Art16","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art16","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art16 — Obligations of providers of high-risk AI systems","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art16-63a82efa.e1abdb71d13c21b8.json"},{"attributes":{"category":"administrative","framework":"eu-ai-act","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"Quality management system (providers of high-risk AI systems)","details":{"automation":"manual","control_category":"administrative","control_id":"AIA-Art17","control_type":"preventive","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art17-8b8a64c3.html","id":"ctrl:eu-ai-act:AIA-Art17","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art17","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art17 — Quality management system (providers of high-risk AI systems)","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art17-8b8a64c3.d3c11e5820716eb3.json"},{"attributes":{"category":"administrative","framework":"eu-ai-act","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"Documentation keeping — 10-year retention of technical documentation, QMS records and conformity documents (providers)","details":{"automation":"manual","control_category":"administrative","control_id":"AIA-Art18","control_type":"preventive","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art18-5be0da8a.html","id":"ctrl:eu-ai-act:AIA-Art18","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art18","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art18 — Documentation keeping — 10-year retention of technical documentation, QMS records and conformity documents (providers)","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art18-5be0da8a.571fee719db61e79.json"},{"attributes":{"category":"technical","framework":"eu-ai-act","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"Automatically generated logs — provider retention of high-risk system logs (minimum six months)","details":{"automation":"automated","control_category":"technical","control_id":"AIA-Art19","control_type":"detective","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":6,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art19-55451bfa.html","id":"ctrl:eu-ai-act:AIA-Art19","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art19","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art19 — Automatically generated logs — provider retention of high-risk system logs (minimum six months)","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art19-55451bfa.87a8da9d00d38c01.json"},{"attributes":{"category":"administrative","framework":"eu-ai-act","type":"corrective"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"Corrective actions and duty of information for non-conforming high-risk AI systems","details":{"automation":"manual","control_category":"administrative","control_id":"AIA-Art20","control_type":"corrective","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art20-ee657bfd.html","id":"ctrl:eu-ai-act:AIA-Art20","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art20","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art20 — Corrective actions and duty of information for non-conforming high-risk AI systems","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art20-ee657bfd.2b32d1feedba9e5b.json"},{"attributes":{"category":"administrative","framework":"eu-ai-act","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"Cooperation with competent authorities; authorised representatives of non-EU providers","details":{"automation":"manual","control_category":"administrative","control_id":"AIA-Art21-22","control_type":"preventive","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art21-22-eb4ae796.html","id":"ctrl:eu-ai-act:AIA-Art21-22","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art21-22","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art21-22 — Cooperation with competent authorities; authorised representatives of non-EU providers","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art21-22-eb4ae796.b50f01834920c071.json"},{"attributes":{"category":"administrative","framework":"eu-ai-act","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"Obligations of importers and distributors; responsibilities along the AI value chain","details":{"automation":"manual","control_category":"administrative","control_id":"AIA-Art23-25","control_type":"preventive","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art23-25-05f2196c.html","id":"ctrl:eu-ai-act:AIA-Art23-25","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art23-25","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art23-25 — Obligations of importers and distributors; responsibilities along the AI value chain","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art23-25-05f2196c.d5b607a27471cdf8.json"},{"attributes":{"category":"administrative","framework":"eu-ai-act","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"Obligations of deployers of high-risk AI systems","details":{"automation":"manual","control_category":"administrative","control_id":"AIA-Art26","control_type":"preventive","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art26-600eb687.html","id":"ctrl:eu-ai-act:AIA-Art26","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art26","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art26 — Obligations of deployers of high-risk AI systems","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art26-600eb687.ed2fb2c45d19ebad.json"},{"attributes":{"category":"administrative","framework":"eu-ai-act","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"Fundamental rights impact assessment for high-risk AI systems (deployers)","details":{"automation":"manual","control_category":"administrative","control_id":"AIA-Art27","control_type":"preventive","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":8,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art27-7b550500.html","id":"ctrl:eu-ai-act:AIA-Art27","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art27","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art27 — Fundamental rights impact assessment for high-risk AI systems (deployers)","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art27-7b550500.c84e32a15d604ed9.json"},{"attributes":{"category":"administrative","framework":"eu-ai-act","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"Conformity assessment of high-risk AI systems","details":{"automation":"manual","control_category":"administrative","control_id":"AIA-Art43","control_type":"preventive","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art43-00b4ae7a.html","id":"ctrl:eu-ai-act:AIA-Art43","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art43","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art43 — Conformity assessment of high-risk AI systems","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art43-00b4ae7a.a3ba609f30fba42e.json"},{"attributes":{"category":"administrative","framework":"eu-ai-act","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"EU declaration of conformity, CE marking and registration in the EU database","details":{"automation":"manual","control_category":"administrative","control_id":"AIA-Art47-49","control_type":"preventive","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art47-49-48da9c43.html","id":"ctrl:eu-ai-act:AIA-Art47-49","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art47-49","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art47-49 — EU declaration of conformity, CE marking and registration in the EU database","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art47-49-48da9c43.37ead2d90babf03e.json"},{"attributes":{"category":"administrative","framework":"eu-ai-act","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"Prohibited AI practices","details":{"automation":"manual","control_category":"administrative","control_id":"AIA-Art5","control_type":"preventive","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":7,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art5-53ad83df.html","id":"ctrl:eu-ai-act:AIA-Art5","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art5","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art5 — Prohibited AI practices","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art5-53ad83df.a1178524224b3d0e.json"},{"attributes":{"category":"administrative","framework":"eu-ai-act","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"Transparency obligations for certain AI systems (deepfakes, chatbots, emotion recognition)","details":{"automation":"manual","control_category":"administrative","control_id":"AIA-Art50","control_type":"preventive","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":6,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art50-a9da90b0.html","id":"ctrl:eu-ai-act:AIA-Art50","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art50","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art50 — Transparency obligations for certain AI systems (deepfakes, chatbots, emotion recognition)","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art50-a9da90b0.c360412f3dca787b.json"},{"attributes":{"category":"administrative","framework":"eu-ai-act","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"Obligations for providers of general-purpose AI (GPAI) models","details":{"automation":"manual","control_category":"administrative","control_id":"AIA-Art53","control_type":"preventive","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art53-fd785909.html","id":"ctrl:eu-ai-act:AIA-Art53","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art53","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art53 — Obligations for providers of general-purpose AI (GPAI) models","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art53-fd785909.bb957c663fdc95e5.json"},{"attributes":{"category":"administrative","framework":"eu-ai-act","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"Obligations for GPAI models with systemic risk","details":{"automation":"manual","control_category":"administrative","control_id":"AIA-Art55","control_type":"preventive","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art55-53ccdfc5.html","id":"ctrl:eu-ai-act:AIA-Art55","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art55","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art55 — Obligations for GPAI models with systemic risk","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art55-53ccdfc5.055acf00c96e3812.json"},{"attributes":{"category":"administrative","framework":"eu-ai-act","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"Risk-based classification of high-risk AI systems","details":{"automation":"manual","control_category":"administrative","control_id":"AIA-Art6-7","control_type":"preventive","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":8,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art6-7-cd7435c0.html","id":"ctrl:eu-ai-act:AIA-Art6-7","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art6-7","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art6-7 — Risk-based classification of high-risk AI systems","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art6-7-cd7435c0.b842560dde490b21.json"},{"attributes":{"category":"administrative","framework":"eu-ai-act","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"Post-market monitoring by providers of high-risk AI systems","details":{"automation":"hybrid","control_category":"administrative","control_id":"AIA-Art72","control_type":"detective","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":6,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art72-2866ca15.html","id":"ctrl:eu-ai-act:AIA-Art72","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art72","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art72 — Post-market monitoring by providers of high-risk AI systems","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art72-2866ca15.6e8db1483b110a8e.json"},{"attributes":{"category":"administrative","framework":"eu-ai-act","type":"corrective"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"Reporting of serious incidents (providers; deployers inform providers)","details":{"automation":"manual","control_category":"administrative","control_id":"AIA-Art73","control_type":"corrective","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art73-60a07514.html","id":"ctrl:eu-ai-act:AIA-Art73","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art73","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art73 — Reporting of serious incidents (providers; deployers inform providers)","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art73-60a07514.839e7b578da88477.json"},{"attributes":{"category":"administrative","framework":"eu-ai-act","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/eu-ai-act/","description":"Risk management system (high-risk)","details":{"automation":"manual","control_category":"administrative","control_id":"AIA-Art9","control_type":"preventive","domains":["AI Governance","Risk Assessment & Management","Governance, Policy & Oversight"],"framework":"eu-ai-act","group":"EU AI Act","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-eu-ai-act-aia-art9-1aacf4f0.html","id":"ctrl:eu-ai-act:AIA-Art9","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aeu-ai-act%3AAIA-Art9","sourceIds":["eu-ai-act"],"sourceUrl":null,"title":"AIA-Art9 — Risk management system (high-risk)","type":"control","url":"/assets/agent_record-ctrl-eu-ai-act-aia-art9-1aacf4f0.3f200bc45443fdec.json"},{"attributes":{"category":"ai_governance","domain":["AI Governance","Governance, Policy & Oversight","Compliance, Audit & Assurance"],"inherent_rating":"high","taxonomy":["nist-ai-rmf-risk","iso-23894-ai-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-accountability-liability","description":"Ambiguous responsibility across developers, deployers, and operators means no party is clearly accountable when AI causes harm; organizations face reputational damage, regulatory sanctions, and civil liability from AI failures at scale, and operational disruption when AI is unavailable.","details":{"category":"ai_governance","impact":"high","inherent_rating":"high","likelihood":"medium","risk_id":"ai-accountability-liability","taxonomies":["nist-ai-rmf-risk","iso-23894-ai-risk"],"treatment":"mitigate"},"direct":false,"htmlUrl":"/agents/records/risk-ai-accountability-liability-193b3f72.html","id":"risk:ai-accountability-liability","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-accountability-liability","sourceIds":["aiuc-1","eu-ai-act","iso-42001","nist-ai-agent-identity","nist-ai-tevv-athlon"],"sourceUrl":null,"title":"AI accountability gaps and organizational liability","type":"risk","url":"/assets/agent_record-risk-ai-accountability-liability-193b3f72.db94603754a465dc.json"},{"attributes":{"category":"ai_governance","domain":["AI Governance","Secure Development (SDLC) & Application Security","Vulnerability & Patch Management"],"inherent_rating":"high","taxonomy":["nist-ai-rmf-risk","iso-23894-ai-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-adversarial-poisoning-attacks","description":"Data-poisoning corrupts training data and embeds backdoors; adversarial evasion, prompt injection, and jailbreaks fool deployed models at inference; model extraction steals proprietary weights/logic — enabling harmful or policy-violating outputs.","details":{"category":"ai_governance","impact":"high","inherent_rating":"high","likelihood":"medium","risk_id":"ai-adversarial-poisoning-attacks","taxonomies":["nist-ai-rmf-risk","iso-23894-ai-risk"],"treatment":"mitigate"},"direct":false,"htmlUrl":"/agents/records/risk-ai-adversarial-poisoning-attacks-ea7df068.html","id":"risk:ai-adversarial-poisoning-attacks","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-adversarial-poisoning-attacks","sourceIds":["aiuc-1","cobit-2019","eu-ai-act","iso-27001","iso-42001","nist-800-53","nist-ai-agent-identity","nist-ai-tevv-athlon"],"sourceUrl":null,"title":"Adversarial attacks, data poisoning and prompt injection","type":"risk","url":"/assets/agent_record-risk-ai-adversarial-poisoning-attacks-ea7df068.68e6c6dffe8915fb.json"},{"attributes":{"category":"ai_governance","domain":["AI Governance","Access Control & Identity Management"],"inherent_rating":"high","taxonomy":["owasp-llm-top10-2025","iso-23894-ai-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-agent-unauthorized-actions","description":"AI agents with excessive permissions or weak action controls execute tool calls, transactions, or code outside their authorized task scope — through prompt injection, misinterpretation, or emergent behaviour — causing data loss, financial loss, or irreversible changes in connected systems.","details":{"category":"ai_governance","impact":"high","inherent_rating":"high","likelihood":"high","risk_id":"ai-agent-unauthorized-actions","taxonomies":["owasp-llm-top10-2025","iso-23894-ai-risk"],"treatment":"mitigate"},"direct":false,"htmlUrl":"/agents/records/risk-ai-agent-unauthorized-actions-194415b8.html","id":"risk:ai-agent-unauthorized-actions","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-agent-unauthorized-actions","sourceIds":["aiuc-1","eu-ai-act","nist-ai-agent-identity","nist-ai-tevv-athlon"],"sourceUrl":null,"title":"Unauthorized or unsafe autonomous agent actions and tool calls","type":"risk","url":"/assets/agent_record-risk-ai-agent-unauthorized-actions-194415b8.5198dd5746cb3c61.json"},{"attributes":{"category":"ai_governance","domain":["AI Governance","Data Protection & Privacy","Compliance, Audit & Assurance"],"inherent_rating":"high","taxonomy":["nist-ai-rmf-risk","iso-23894-ai-risk","nist-privacy-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-bias-discrimination","description":"Models encode/amplify historical bias, producing allocative harm (biased hiring/lending/housing/benefits), representational harm (stereotyping), and evaluation bias masking disparate subgroup performance — systematically disadvantaging protected groups.","details":{"category":"ai_governance","impact":"high","inherent_rating":"high","likelihood":"high","risk_id":"ai-bias-discrimination","taxonomies":["nist-ai-rmf-risk","iso-23894-ai-risk","nist-privacy-risk"],"treatment":"mitigate"},"direct":false,"htmlUrl":"/agents/records/risk-ai-bias-discrimination-35faf209.html","id":"risk:ai-bias-discrimination","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-bias-discrimination","sourceIds":["aiuc-1","eu-ai-act","iso-42001","nist-ai-agent-identity","nist-ai-tevv-athlon"],"sourceUrl":null,"title":"Harmful AI bias and discrimination against protected groups","type":"risk","url":"/assets/agent_record-risk-ai-bias-discrimination-35faf209.7c885bc120fdd613.json"},{"attributes":{"category":"ai_governance","domain":["AI Governance"],"inherent_rating":"high","taxonomy":["nist-ai-rmf-risk","iso-23894-ai-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-catastrophic-cyber-misuse","description":"Users obtain meaningful uplift from an AI system for offensive cyber operations (malware development, vulnerability exploitation, autonomous intrusion) or for biological, chemical, nuclear, or radiological harm, exposing the deploying organization to severe legal, regulatory, and societal consequences.","details":{"category":"ai_governance","impact":"critical","inherent_rating":"high","likelihood":"low","risk_id":"ai-catastrophic-cyber-misuse","taxonomies":["nist-ai-rmf-risk","iso-23894-ai-risk"],"treatment":"mitigate"},"direct":false,"htmlUrl":"/agents/records/risk-ai-catastrophic-cyber-misuse-6bced10d.html","id":"risk:ai-catastrophic-cyber-misuse","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-catastrophic-cyber-misuse","sourceIds":["aiuc-1","eu-ai-act","iso-42001","nist-ai-tevv-athlon"],"sourceUrl":null,"title":"Misuse of AI systems for offensive cyber operations or catastrophic harm","type":"risk","url":"/assets/agent_record-risk-ai-catastrophic-cyber-misuse-6bced10d.bad2a3730a8b7534.json"},{"attributes":{"category":"ai_governance","domain":["AI Governance","Secure Development (SDLC) & Application Security"],"inherent_rating":"medium","taxonomy":["iso-23894-ai-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-emergent-integration-risk","description":"Large-scale or multi-model pipelines exhibit emergent capabilities/failures not present in any component and not predictable from component testing; integration with legacy systems introduces interface mismatches and configuration errors.","details":{"category":"ai_governance","impact":"high","inherent_rating":"medium","likelihood":"medium","risk_id":"ai-emergent-integration-risk","taxonomies":["iso-23894-ai-risk"],"treatment":"mitigate"},"direct":false,"htmlUrl":"/agents/records/risk-ai-emergent-integration-risk-8490271c.html","id":"risk:ai-emergent-integration-risk","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-emergent-integration-risk","sourceIds":["aiuc-1","cobit-2019","eu-ai-act","iso-27001","iso-42001","nist-800-53","nist-ai-agent-identity","nist-ai-tevv-athlon","soc1","soc2","sox"],"sourceUrl":null,"title":"Emergent behaviour and unsafe AI system integration","type":"risk","url":"/assets/agent_record-risk-ai-emergent-integration-risk-8490271c.7c427d5d71af8a3d.json"},{"attributes":{"category":"ai_governance","domain":["AI Governance","Third-Party / Supply-Chain Risk","Compliance, Audit & Assurance"],"inherent_rating":"high","taxonomy":["eu-ai-act-risk","nist-ai-rmf-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-gpai-systemic-transparency","description":"GPAI providers failing transparency/copyright/training-data obligations; systemic-risk models (>10^25 FLOPs) lacking red-teaming, incident reporting, and cybersecurity; unlabeled deepfake/synthetic content; and concentration of GPAI capability creating ecosystem single points of failure.","details":{"category":"ai_governance","impact":"high","inherent_rating":"high","likelihood":"medium","risk_id":"ai-gpai-systemic-transparency","taxonomies":["eu-ai-act-risk","nist-ai-rmf-risk"],"treatment":"mitigate"},"direct":false,"htmlUrl":"/agents/records/risk-ai-gpai-systemic-transparency-7a746323.html","id":"risk:ai-gpai-systemic-transparency","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-gpai-systemic-transparency","sourceIds":["aiuc-1","cobit-2019","dora","eu-ai-act","iso-27001","iso-42001","nis2","nist-800-53","nist-csf-2","nydfs-500"],"sourceUrl":null,"title":"GPAI transparency, systemic-risk and synthetic-content obligations","type":"risk","url":"/assets/agent_record-risk-ai-gpai-systemic-transparency-7a746323.6e7a571abe779b08.json"},{"attributes":{"category":"ai_governance","domain":["AI Governance","Data Protection & Privacy","Compliance, Audit & Assurance"],"inherent_rating":"high","taxonomy":["eu-ai-act-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-highrisk-biometrics","description":"Because remote biometric identification, categorization, or emotion-recognition systems (EU AI Act Annex III(1)) are deployed without conformity assessment, data governance, human oversight, accuracy/robustness controls, or a fundamental-rights impact assessment, they can misidentify, misclassify, or surveil individuals, resulting in wrongful treatment, discrimination, and rights violations.","details":{"category":"ai_governance","impact":"high","inherent_rating":"high","likelihood":"medium","risk_id":"ai-highrisk-biometrics","taxonomies":["eu-ai-act-risk"],"treatment":"mitigate"},"direct":false,"htmlUrl":"/agents/records/risk-ai-highrisk-biometrics-c23b524a.html","id":"risk:ai-highrisk-biometrics","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-highrisk-biometrics","sourceIds":["aiuc-1","eu-ai-act","iso-42001"],"sourceUrl":null,"title":"Rights harm from biometric-identification AI","type":"risk","url":"/assets/agent_record-risk-ai-highrisk-biometrics-c23b524a.782d159a831b974c.json"},{"attributes":{"category":"ai_governance","domain":["AI Governance","Business Continuity & Disaster Recovery","Compliance, Audit & Assurance"],"inherent_rating":"high","taxonomy":["eu-ai-act-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-highrisk-critical-infra","description":"Because AI acting as a safety component in critical digital infrastructure, road traffic, or utilities (Annex III(2)) operates without the required risk management, robustness, and human oversight, it can fail or behave unsafely, resulting in service disruption and threats to public safety and continuity.","details":{"category":"ai_governance","impact":"high","inherent_rating":"high","likelihood":"medium","risk_id":"ai-highrisk-critical-infra","taxonomies":["eu-ai-act-risk"],"treatment":"mitigate"},"direct":false,"htmlUrl":"/agents/records/risk-ai-highrisk-critical-infra-a7a37365.html","id":"risk:ai-highrisk-critical-infra","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-highrisk-critical-infra","sourceIds":["aiuc-1","ccpa","cobit-2019","eu-ai-act","iia-2024","iia-pos-2026-three-lines","iso-27001","iso-42001"],"sourceUrl":null,"title":"Public-safety harm from AI in critical infrastructure","type":"risk","url":"/assets/agent_record-risk-ai-highrisk-critical-infra-a7a37365.188d0210ccd8c746.json"},{"attributes":{"category":"ai_governance","domain":["AI Governance","Compliance, Audit & Assurance"],"inherent_rating":"medium","taxonomy":["eu-ai-act-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-highrisk-education","description":"Because AI determining access, admission, assessment, or proctoring in education and vocational training (Annex III(3)) operates without bias controls, transparency, human oversight, or fundamental-rights safeguards, learners can be scored or excluded unfairly, resulting in denial of educational opportunity and discrimination.","details":{"category":"ai_governance","impact":"medium","inherent_rating":"medium","likelihood":"medium","risk_id":"ai-highrisk-education","taxonomies":["eu-ai-act-risk"],"treatment":"mitigate"},"direct":false,"htmlUrl":"/agents/records/risk-ai-highrisk-education-fe20b899.html","id":"risk:ai-highrisk-education","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-highrisk-education","sourceIds":["aiuc-1","eu-ai-act","iso-42001","nist-ai-agent-identity"],"sourceUrl":null,"title":"Unfair exclusion by AI in education and training","type":"risk","url":"/assets/agent_record-risk-ai-highrisk-education-fe20b899.f1a75a6efc91c599.json"},{"attributes":{"category":"ai_governance","domain":["AI Governance","Human Resources / Personnel Security","Compliance, Audit & Assurance"],"inherent_rating":"high","taxonomy":["eu-ai-act-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-highrisk-employment","description":"Because AI used for recruitment, selection, promotion, task allocation, or worker monitoring (Annex III(4)) operates without bias mitigation, worker transparency, human oversight, or a data-protection impact assessment, it can decide about workers on biased or opaque grounds, resulting in discriminatory or unfair employment outcomes.","details":{"category":"ai_governance","impact":"high","inherent_rating":"high","likelihood":"medium","risk_id":"ai-highrisk-employment","taxonomies":["eu-ai-act-risk"],"treatment":"mitigate"},"direct":false,"htmlUrl":"/agents/records/risk-ai-highrisk-employment-f50a88ef.html","id":"risk:ai-highrisk-employment","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-highrisk-employment","sourceIds":["aiuc-1","eu-ai-act","iia-2024","iso-42001"],"sourceUrl":null,"title":"Discriminatory outcomes from AI in employment","type":"risk","url":"/assets/agent_record-risk-ai-highrisk-employment-f50a88ef.1e79112974744c48.json"},{"attributes":{"category":"ai_governance","domain":["AI Governance","Financial Reporting Controls (SOX)","Compliance, Audit & Assurance"],"inherent_rating":"high","taxonomy":["eu-ai-act-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-highrisk-essential-services","description":"Because AI evaluating eligibility for public benefits, creditworthiness, or insurance risk and pricing (Annex III(5)) operates without fairness, explainability, human oversight, or the required conformity controls, it can wrongly deny or misprice essential services, resulting in unlawful exclusion and consumer harm.","details":{"category":"ai_governance","impact":"high","inherent_rating":"high","likelihood":"medium","risk_id":"ai-highrisk-essential-services","taxonomies":["eu-ai-act-risk"],"treatment":"mitigate"},"direct":false,"htmlUrl":"/agents/records/risk-ai-highrisk-essential-services-46de2ea9.html","id":"risk:ai-highrisk-essential-services","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-highrisk-essential-services","sourceIds":["aiuc-1","eu-ai-act","iia-2024","iso-42001"],"sourceUrl":null,"title":"Unlawful denial of essential services by AI","type":"risk","url":"/assets/agent_record-risk-ai-highrisk-essential-services-46de2ea9.1cc9f63b630c730a.json"},{"attributes":{"category":"ai_governance","domain":["AI Governance","Governance, Policy & Oversight","Compliance, Audit & Assurance"],"inherent_rating":"high","taxonomy":["eu-ai-act-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-highrisk-justice-democracy","description":"Because AI assisting judicial decisions or intended to influence elections or voter behaviour (Annex III(8)) operates without human oversight, transparency, and integrity safeguards, it can distort legal outcomes or manipulate electorates, resulting in threats to due process and democratic integrity.","details":{"category":"ai_governance","impact":"high","inherent_rating":"high","likelihood":"low","risk_id":"ai-highrisk-justice-democracy","taxonomies":["eu-ai-act-risk"],"treatment":"mitigate"},"direct":false,"htmlUrl":"/agents/records/risk-ai-highrisk-justice-democracy-7f7e4bfd.html","id":"risk:ai-highrisk-justice-democracy","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-highrisk-justice-democracy","sourceIds":["aiuc-1","eu-ai-act","iso-42001"],"sourceUrl":null,"title":"Harm to due process and democratic integrity from AI","type":"risk","url":"/assets/agent_record-risk-ai-highrisk-justice-democracy-7f7e4bfd.c4f5a787d32ca9d0.json"},{"attributes":{"category":"ai_governance","domain":["AI Governance","Data Protection & Privacy","Compliance, Audit & Assurance"],"inherent_rating":"high","taxonomy":["eu-ai-act-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-highrisk-law-enforcement","description":"Because AI for individual risk assessment, evidence evaluation, profiling, or predictive policing (Annex III(6)) operates without strict accuracy, human oversight, logging, and fundamental-rights safeguards, it can drive wrongful enforcement action, resulting in unjust detention, profiling harm, and rights violations.","details":{"category":"ai_governance","impact":"critical","inherent_rating":"high","likelihood":"low","risk_id":"ai-highrisk-law-enforcement","taxonomies":["eu-ai-act-risk"],"treatment":"mitigate"},"direct":false,"htmlUrl":"/agents/records/risk-ai-highrisk-law-enforcement-7d4537e1.html","id":"risk:ai-highrisk-law-enforcement","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-highrisk-law-enforcement","sourceIds":["aiuc-1","eu-ai-act","iso-42001","nist-ai-agent-identity","nist-ai-tevv-athlon"],"sourceUrl":null,"title":"Rights violations from AI in law enforcement","type":"risk","url":"/assets/agent_record-risk-ai-highrisk-law-enforcement-7d4537e1.56621939b56634ed.json"},{"attributes":{"category":"ai_governance","domain":["AI Governance","Data Protection & Privacy","Compliance, Audit & Assurance"],"inherent_rating":"high","taxonomy":["eu-ai-act-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-highrisk-migration-border","description":"Because AI for migration, asylum, or visa risk assessment and border-control screening (Annex III(7)) operates without the required accuracy, human oversight, and fundamental-rights protections, it can misjudge individuals, resulting in wrongful denial of entry or status and discrimination.","details":{"category":"ai_governance","impact":"high","inherent_rating":"high","likelihood":"low","risk_id":"ai-highrisk-migration-border","taxonomies":["eu-ai-act-risk"],"treatment":"mitigate"},"direct":false,"htmlUrl":"/agents/records/risk-ai-highrisk-migration-border-47d2b2d8.html","id":"risk:ai-highrisk-migration-border","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-highrisk-migration-border","sourceIds":["aiuc-1","eu-ai-act","iia-2024","iso-42001"],"sourceUrl":null,"title":"Wrongful denial by AI in migration and border control","type":"risk","url":"/assets/agent_record-risk-ai-highrisk-migration-border-47d2b2d8.a576b5e6950fddc2.json"}],"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0120d17e0da51c637ec6d208b44f68806054b442bf381ab2a3bf290cbfe22a17","properties":{"control_id":"AIA-Art13","coverage":"full","delta":null,"framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-10-f53dd533.json","sourceId":"uc:UC-AI-10","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art13-bee2028e.json","targetId":"ctrl:eu-ai-act:AIA-Art13","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:061a1d5744eb1bccd4d622a3afec6174c9dc3c435f2600f98573247bfd84896d","properties":{"rationale":"Pre-deployment impact assessment plus high-risk classification is the mandated control education-AI is faulted for lacking, gating unfair scoring/exclusion.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-04-b35afd39.json","sourceId":"uc:UC-AI-04","targetDetailPath":"/data/v1/records/risk-ai-highrisk-education-fe20b899.json","targetId":"risk:ai-highrisk-education","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:069ac1259e7f29f7bbf03232bd2d8b50070b882b90869b336c8a2914671d90d2","properties":{"rationale":"Regulator/assessor-sufficient documentation is the due-diligence evidence that reduces compliance liability.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-06-f47eedcb.json","sourceId":"uc:UC-AI-06","targetDetailPath":"/data/v1/records/risk-ai-accountability-liability-193b3f72.json","targetId":"risk:ai-accountability-liability","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0e01a91c505dc9722946c2e57191c233c7313b629f4f2666e36fdb9e39c37ef8","properties":{"control_id":"AIA-Art16","coverage":"partial","delta":"substantive QMS, conformity-assessment, CE-marking, and EU-database-registration duties are not yet covered by a dedicated unified control - an acknowledged coverage gap in the AI Governance domain","framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","sourceId":"uc:UC-AI-13","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art16-63a82efa.json","targetId":"ctrl:eu-ai-act:AIA-Art16","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0ffa2def5c469c649f11402c81e8ed1599c552790a44f28df6589a3bc9e41a5a","properties":{"rationale":"Lifetime event logs provide the traceability/audit trail underpinning accountability for AI operation.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-08-fada68b7.json","sourceId":"uc:UC-AI-08","targetDetailPath":"/data/v1/records/risk-ai-accountability-liability-193b3f72.json","targetId":"risk:ai-accountability-liability","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:138cee71e2689f1c57ab4ea4a589cc9e8a1a1c0be8ebca8f9307054ad5e0ff03","properties":{"rationale":"A documented quality management system with owned procedures, issue tracking, and corrective action is the organizational accountability structure regulators and customers hold the provider to.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-24-066ea393.json","sourceId":"uc:UC-AI-24","targetDetailPath":"/data/v1/records/risk-ai-accountability-liability-193b3f72.json","targetId":"risk:ai-accountability-liability","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1b152ffafabbccfd351468403eaa09760ac35c82f3c4a5b5892a3443464569d8","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art13-bee2028e.json","sourceId":"ctrl:eu-ai-act:AIA-Art13","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1b1ee959cc26f4a87a9386efa482ae23a1501dc8f85d4ce4a62122317e320641","properties":{"control_id":"AIA-Art72","coverage":"partial","delta":"a documented post-market monitoring plan, proportionate to the system's risk, that actively collects and analyses lifetime performance data including interaction with other AI systems","framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-08-fada68b7.json","sourceId":"uc:UC-AI-08","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art72-2866ca15.json","targetId":"ctrl:eu-ai-act:AIA-Art72","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:206e737c385ca53fe82d7ba6df4799fc9a0c3e70df649c5f972de37fdfe26c05","properties":{"control_id":"AIA-Art23-25","coverage":"partial","delta":"importer and distributor verification duties and the conditions under which a distributor, importer, or deployer becomes a provider","framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","sourceId":"uc:UC-AI-13","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art23-25-05f2196c.json","targetId":"ctrl:eu-ai-act:AIA-Art23-25","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:20b5b29cb2a9724d9380d6511c61acf9b3573c564e397935fff41647d5731bfa","properties":{"rationale":"Fundamental-rights impact assessment and high-risk classification is the safeguard law-enforcement AI is faulted for lacking before deployment.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-04-b35afd39.json","sourceId":"uc:UC-AI-04","targetDetailPath":"/data/v1/records/risk-ai-highrisk-law-enforcement-7d4537e1.json","targetId":"risk:ai-highrisk-law-enforcement","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2106f7a91c88cd5dc7e2734eb94ee9491fdc036b430053d96b3c746a35a4a4c9","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art20-ee657bfd.json","sourceId":"ctrl:eu-ai-act:AIA-Art20","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:268ce184229227f812651c6e43f74f22fbae06dd4a556046f1ea8b8ca0e191c9","properties":{"rationale":"Examining datasets for biases and mitigating those affecting rights is the data-source control against discriminatory model behavior.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/risk-ai-bias-discrimination-35faf209.json","targetId":"risk:ai-bias-discrimination","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:290c7197b3c6537d87d8c837c2c5745aced7a027b965811dd1a24b0f5631eeb4","properties":{"rationale":"Impact/DPIA assessment and classification gates biased or opaque employment-AI before deployment, the assessment the risk says is missing.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-04-b35afd39.json","sourceId":"uc:UC-AI-04","targetDetailPath":"/data/v1/records/risk-ai-highrisk-employment-f50a88ef.json","targetId":"risk:ai-highrisk-employment","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2b193512bc77b53a178e9ead6980146bf171465ea77ba0964f510bcae03775fe","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art18-5be0da8a.json","sourceId":"ctrl:eu-ai-act:AIA-Art18","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2b23642bcd293a8c7647618a5f7379d14cbd6f7e7fa67b171195a5c6e4636f1b","properties":{"control_id":"AIA-Art17","coverage":"partial","delta":"risk management, post-market monitoring, serious-incident reporting, and technical-documentation elements of the quality management system are satisfied by their companion controls","framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-24-066ea393.json","sourceId":"uc:UC-AI-24","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art17-8b8a64c3.json","targetId":"ctrl:eu-ai-act:AIA-Art17","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2ebc35144e59f52191a4f3a972c4fb4dcee0c2cd0fb534c78ed76e3e744ffa47","properties":{"control_id":"AIA-Art18","coverage":"partial","delta":"ten-year retention of technical documentation, quality-management records, and conformity documents after the system is placed on the market","framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-06-f47eedcb.json","sourceId":"uc:UC-AI-06","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art18-5be0da8a.json","targetId":"ctrl:eu-ai-act:AIA-Art18","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:332fceb16fc28b89237116904bf46819561393d34c80a8461e04aa1ea5d282e3","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art11-6286951e.json","sourceId":"ctrl:eu-ai-act:AIA-Art11","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:39c6d2f1e557c01b1dc787fced10a7b0a28ce06b4907261d626691260deb0cd0","properties":{"rationale":"Acceptable-use policy and use screening prohibit offensive-cyber and weapons-uplift uses, complementing the technical refusal control.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","sourceId":"uc:UC-AI-12","targetDetailPath":"/data/v1/records/risk-ai-catastrophic-cyber-misuse-6bced10d.json","targetId":"risk:ai-catastrophic-cyber-misuse","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3b9ed6f05fd9d237f6102e13c13ce5fc7df7836d69f775bccdc377d4039dfeed","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art6-7-cd7435c0.json","sourceId":"ctrl:eu-ai-act:AIA-Art6-7","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3c511ac1363b3cf7707cbe89a44ceff9ac1a631ccce30cd2f437a7b52ab0cf44","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art72-2866ca15.json","sourceId":"ctrl:eu-ai-act:AIA-Art72","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3c72b18e584a203354850963f832b1486e3dd1fd1d8d8f25bc3788de37bc8493","properties":{"control_id":"AIA-Art47-49","coverage":"partial","delta":"drawing up the declaration of conformity, affixing the marking, and registering the system in the public database before placing on the market","framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","sourceId":"uc:UC-AI-13","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art47-49-48da9c43.json","targetId":"ctrl:eu-ai-act:AIA-Art47-49","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:41e2f7c3bbdb79c83f3d756c399e0ab252e00ec7add49757cef7164b72148cc1","properties":{"control_id":"AIA-Art15","coverage":"partial","delta":"AI-specific accuracy metrics and lifecycle-consistent performance require dedicated AI controls","framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-04-ee9d76b1.json","sourceId":"uc:UC-SDLC-04","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art15-c3704411.json","targetId":"ctrl:eu-ai-act:AIA-Art15","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:43a819bc0f51c24d97dc540a9b8b9b7cbb8e4e9ef3dd7300c1e5d8199e19fb01","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art43-00b4ae7a.json","sourceId":"ctrl:eu-ai-act:AIA-Art43","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:471a0896837a1f88972d37d8fd39f0416f1f5b99c225e8bb2df05e7110265338","properties":{"control_id":"AIA-Art26","coverage":"partial","delta":"operational oversight, monitoring, and log-retention duties evidenced via dedicated controls","framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","sourceId":"uc:UC-AI-13","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art26-600eb687.json","targetId":"ctrl:eu-ai-act:AIA-Art26","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:47bc91a357dabf951399db5e73d90410a16ea531245923ce66ba8d2c4e5a6628","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art12-3714b8af.json","sourceId":"ctrl:eu-ai-act:AIA-Art12","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4c80ad8271ed4d52778610eaebbaa683be460e6a1f6905a97b1a98eaaef59d1b","properties":{"control_id":"AIA-Art11","coverage":"full","delta":null,"framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-06-f47eedcb.json","sourceId":"uc:UC-AI-06","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art11-6286951e.json","targetId":"ctrl:eu-ai-act:AIA-Art11","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:557dcc6e47909eda2548a51127f406d05ce4754c2c644bd8370cc6b5b906285f","properties":{"control_id":"AIA-Art10","coverage":"full","delta":null,"framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art10-76043f54.json","targetId":"ctrl:eu-ai-act:AIA-Art10","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:55b035fee8511332600e8a626354b3dd8f64e7151f94951b8501c6321f34ece6","properties":{"rationale":"Pre-deployment safety-impact assessment and risk classification is the risk-management step critical-infrastructure AI is faulted for operating without.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-04-b35afd39.json","sourceId":"uc:UC-AI-04","targetDetailPath":"/data/v1/records/risk-ai-highrisk-critical-infra-a7a37365.json","targetId":"risk:ai-highrisk-critical-infra","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5f261315ae3bc46e0b244a3214e815e0c295f7650d81f56871fec43075a0f53b","properties":{"rationale":"Imposes the effective human oversight that justice/democracy high-risk AI is faulted for lacking.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-16-b95e2895.json","sourceId":"uc:UC-AI-16","targetDetailPath":"/data/v1/records/risk-ai-highrisk-justice-democracy-7f7e4bfd.json","targetId":"risk:ai-highrisk-justice-democracy","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:62f7b157f30453ddf4e51a3434f17297eacc0af4c7540704b5bf41f53c0b432d","properties":{"rationale":"Machine-readable marking of AI-generated/deepfake content is the synthetic-content labeling obligation the risk says is unmet.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-10-f53dd533.json","sourceId":"uc:UC-AI-10","targetDetailPath":"/data/v1/records/risk-ai-gpai-systemic-transparency-7a746323.json","targetId":"risk:ai-gpai-systemic-transparency","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:645edf3f778bfbc0cd502e6c50e4335d30686a5adefc03d64f389a44621ec84c","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art14-4b7ae8a7.json","sourceId":"ctrl:eu-ai-act:AIA-Art14","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6ca57f9888d04587d26b5250a645328cd56c95f1d928f81c7761d97c34e4d9e1","properties":{"rationale":"Stakeholder concern channels surface discrimination complaints for triage and remediation.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-11-7112e573.json","sourceId":"uc:UC-AI-11","targetDetailPath":"/data/v1/records/risk-ai-bias-discrimination-35faf209.json","targetId":"risk:ai-bias-discrimination","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6d1541bec4f02b6265f535de4797c15b52087938ff2ff506dbf1206139230280","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art9-1aacf4f0.json","sourceId":"ctrl:eu-ai-act:AIA-Art9","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:711a1e90cc08e74c4fa39e7c5ba0baed9abb795e999c10d2a47d3e0db122c51f","properties":{"control_id":"AIA-Art12","coverage":"full","delta":null,"framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-08-fada68b7.json","sourceId":"uc:UC-AI-08","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art12-3714b8af.json","targetId":"ctrl:eu-ai-act:AIA-Art12","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:72be0e6e45efd491fdce3d0bd12f80a632ca7dbb65964c613c5d6b3d89df9a9b","properties":{"rationale":"Pre-deployment impact assessment and rights-safeguard classification gate the wrongful migration/border decisions the risk says lack them.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-04-b35afd39.json","sourceId":"uc:UC-AI-04","targetDetailPath":"/data/v1/records/risk-ai-highrisk-migration-border-47d2b2d8.json","targetId":"risk:ai-highrisk-migration-border","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:72e2c51e42ec5d4e06ea479257fb786ce96675e104d4393ae8c45a3e27c710b3","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art10-76043f54.json","sourceId":"ctrl:eu-ai-act:AIA-Art10","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:74bc65e8e9aa1bfb54f93555a389e7974ee95deaf69f27e0c445b8aa95797baf","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art27-7b550500.json","sourceId":"ctrl:eu-ai-act:AIA-Art27","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:77fecc62e741fe0e8c93b1b3564065fefe1d33c0684089f045926cddd41b34d4","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art5-53ad83df.json","sourceId":"ctrl:eu-ai-act:AIA-Art5","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7a773fb1e78534dc51329b05ae6a49c568389eee53a7cead548ae2dae672337f","properties":{"control_id":"AIA-Art53","coverage":"full","delta":null,"framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-15-eb9589c6.json","sourceId":"uc:UC-AI-15","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art53-fd785909.json","targetId":"ctrl:eu-ai-act:AIA-Art53","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7c8c831f60da8b2a84743b237bbffdde0a7b4f290d5b862faa0e3d79ae769561","properties":{"control_id":"AIA-Art9","coverage":"partial","delta":"EU AI Act adds AI-lifecycle-specific continuous risk process and testing","framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-risk-01-13d56297.json","sourceId":"uc:UC-RISK-01","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art9-1aacf4f0.json","targetId":"ctrl:eu-ai-act:AIA-Art9","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7d896e6a2108f3ef129303e21a416aee8ea46d62cb180a34c3c03ed7af50f87b","properties":{"rationale":"Mandated state-of-the-art adversarial testing plus model and infrastructure cybersecurity directly defend against adversarial attacks and model extraction.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-15-eb9589c6.json","sourceId":"uc:UC-AI-15","targetDetailPath":"/data/v1/records/risk-ai-adversarial-poisoning-attacks-ea7df068.json","targetId":"risk:ai-adversarial-poisoning-attacks","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7de1a69b562572f7c55b27787db97bb6a0fd185e1b043167c4f6a561b677ff0a","properties":{"rationale":"Data preparation/quality and bias examination address the training-data bias central to education-AI fairness requirements.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/risk-ai-highrisk-education-fe20b899.json","targetId":"risk:ai-highrisk-education","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:81d44294f99278af7978ea2c1252664038b73ac319ebe9256bebcaf995fe82a1","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art15-c3704411.json","sourceId":"ctrl:eu-ai-act:AIA-Art15","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:84059028aa84c8e1e4ea854971dfa5bf4e8d663dd503d1e7b0f32ed0419c12de","properties":{"rationale":"Timely incident and regulator reporting discharges external duties and reduces sanction exposure, but does not close the core ambiguous-responsibility gap the risk centers on; role/owner assignment (UC-02/UC-13) is operative.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-11-7112e573.json","sourceId":"uc:UC-AI-11","targetDetailPath":"/data/v1/records/risk-ai-accountability-liability-193b3f72.json","targetId":"risk:ai-accountability-liability","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:844ae35757fda107f5758acfae8ee0c79cb13e92306be7f2eef8590ecf5f50d0","properties":{"rationale":"Impact assessment of effects on individuals/groups/society and fundamental rights is the core high-risk control gating justice/democracy harms before deployment.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-04-b35afd39.json","sourceId":"uc:UC-AI-04","targetDetailPath":"/data/v1/records/risk-ai-highrisk-justice-democracy-7f7e4bfd.json","targetId":"risk:ai-highrisk-justice-democracy","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:85465095a57ff528ced9e4c3c805f19a185af4fef6c62c16dfcb6d3a85cab4ae","properties":{"rationale":"Prohibition screening blocks untargeted facial-image scraping and prohibited biometric categorization.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","sourceId":"uc:UC-AI-12","targetDetailPath":"/data/v1/records/risk-ai-highrisk-biometrics-c23b524a.json","targetId":"risk:ai-highrisk-biometrics","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:861d6bff9fa8849ae708758cd4cae4382f01bfcdc47225ebb9ba247113eb62f3","properties":{"rationale":"Directly discharges GPAI transparency/copyright/training-summary duties and, for systemic models, the red-teaming, incident reporting and cybersecurity the risk says are missing.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-15-eb9589c6.json","sourceId":"uc:UC-AI-15","targetDetailPath":"/data/v1/records/risk-ai-gpai-systemic-transparency-7a746323.json","targetId":"risk:ai-gpai-systemic-transparency","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:86c062512addea8a4624ceb2229386143903b633c2e84a1742f2f39a86273909","properties":{"rationale":"Automatic event logging and traceability is the mandated logging control supporting law-enforcement-AI accuracy and oversight requirements.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-08-fada68b7.json","sourceId":"uc:UC-AI-08","targetDetailPath":"/data/v1/records/risk-ai-highrisk-law-enforcement-7d4537e1.json","targetId":"risk:ai-highrisk-law-enforcement","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8b9d489f24b6cf9a77a0d60a226a11f1468c74b1a0e130e62e9ce4dee9239361","properties":{"rationale":"Provenance recording and data-selection governance reduce training-data poisoning and embedded backdoors.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/risk-ai-adversarial-poisoning-attacks-ea7df068.json","targetId":"risk:ai-adversarial-poisoning-attacks","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9402dae5ede19ecf9900dc5577c618d04a03d1d7e4dfd3271b19f10afd5f1f37","properties":{"rationale":"Engineering solutions to remain robust and resilient against adversarial manipulation (EU AI Act Art.15) directly hardens systems against evasion, poisoning and prompt injection.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-04-ee9d76b1.json","sourceId":"uc:UC-SDLC-04","targetDetailPath":"/data/v1/records/risk-ai-adversarial-poisoning-attacks-ea7df068.json","targetId":"risk:ai-adversarial-poisoning-attacks","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:953121cec4e592cd3f15a23d420be7f13c156047cda9ad39ef67fc624967637f","properties":{"rationale":"General incident-reporting infrastructure supports the serious-incident reporting duties for systemic models.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-11-7112e573.json","sourceId":"uc:UC-AI-11","targetDetailPath":"/data/v1/records/risk-ai-gpai-systemic-transparency-7a746323.json","targetId":"risk:ai-gpai-systemic-transparency","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a1176b69934bb7a2a9b58a8902bddd8d43154c94593f024b32399d5563c800e9","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art47-49-48da9c43.json","sourceId":"ctrl:eu-ai-act:AIA-Art47-49","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a4b0b9a8be89cc1c9692ba1f936a0c98fb8a398638a3faaec9ca59b260ba19b6","properties":{"rationale":"Fundamental-rights impact assessment and classification is the exact control biometric-ID systems are faulted for lacking, blocking unassessed deployment.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-04-b35afd39.json","sourceId":"uc:UC-AI-04","targetDetailPath":"/data/v1/records/risk-ai-highrisk-biometrics-c23b524a.json","targetId":"risk:ai-highrisk-biometrics","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:aa2bb7ba717c5ce844028d7bbfbbb392a9b458f4a4f55e65abf03c53175313f7","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art19-55451bfa.json","sourceId":"ctrl:eu-ai-act:AIA-Art19","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:aca06ef120dabb82430a487ed877679a3ae107279b2f22a40b97fa0609e4626e","properties":{"control_id":"AIA-Art43","coverage":"partial","delta":"execution of the applicable conformity assessment procedure (internal control or notified body) before placing the system on the market","framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","sourceId":"uc:UC-AI-13","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art43-00b4ae7a.json","targetId":"ctrl:eu-ai-act:AIA-Art43","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:af6ab2d5251cdc7bb47cb1c14e6b98ada5789c922c2183d0f20d3eebe9bcec52","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art26-600eb687.json","sourceId":"ctrl:eu-ai-act:AIA-Art26","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b28ea7bff8a7a69df01a6a4d9b3d714b1e0a06a3413cb514b0e7aa17e4b438dd","properties":{"control_id":"AIA-Art55","coverage":"full","delta":null,"framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-15-eb9589c6.json","sourceId":"uc:UC-AI-15","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art55-53ccdfc5.json","targetId":"ctrl:eu-ai-act:AIA-Art55","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:bb036db59a6b451454b08226e01ad570abab18c7af1b1fe4d5ddf6c7ad461e80","properties":{"rationale":"Human overseers who can halt or override the system are the backstop when an agent acts outside its intended scope.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-16-b95e2895.json","sourceId":"uc:UC-AI-16","targetDetailPath":"/data/v1/records/risk-ai-agent-unauthorized-actions-194415b8.json","targetId":"risk:ai-agent-unauthorized-actions","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:bcca9a04811547af6f8efe99349fd908107c33b0cb3a58e430301295776d80db","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art21-22-eb4ae796.json","sourceId":"ctrl:eu-ai-act:AIA-Art21-22","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:bec6106b16982e5eadb40b4541bc5b95f3a2e1c9a4b6fe1b66329fbf3f79d599","properties":{"rationale":"Blocking manipulative-technique uses reduces AI-driven electorate manipulation.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","sourceId":"uc:UC-AI-12","targetDetailPath":"/data/v1/records/risk-ai-highrisk-justice-democracy-7f7e4bfd.json","targetId":"risk:ai-highrisk-justice-democracy","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c6a95e75741b7912283c6c65a39aa1b75da07ed6faf729a70e32129d65986800","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art50-a9da90b0.json","sourceId":"ctrl:eu-ai-act:AIA-Art50","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c75fc9df42a3d842da0c4a5bd5b70b9d1de6b03a36c073443137ebd0079c518f","properties":{"control_id":"AIA-Art73","coverage":"full","delta":null,"framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-11-7112e573.json","sourceId":"uc:UC-AI-11","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art73-60a07514.json","targetId":"ctrl:eu-ai-act:AIA-Art73","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:cb331171f2173812819b3693734a404afeb336920f1e8b5f4e994f54618b914a","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art55-53ccdfc5.json","sourceId":"ctrl:eu-ai-act:AIA-Art55","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:cdfc2f9413fd140a562df49ea5eaba903ae055b65fcccc3e24492dd8521dfca7","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art73-60a07514.json","sourceId":"ctrl:eu-ai-act:AIA-Art73","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d1e1c3d34ae1816a1c94e4cbf595b24e2536dc0f9ff2226deebb6cb2eee7e0ee","properties":{"rationale":"Determining value-chain role and allocating responsibilities/obligations to named owners closes the ambiguous cross-party accountability the risk names.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","sourceId":"uc:UC-AI-13","targetDetailPath":"/data/v1/records/risk-ai-accountability-liability-193b3f72.json","targetId":"risk:ai-accountability-liability","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d29cfe9b4c6815e2799060bccba899163305433b1c550706a1ffaf8800b89fab","properties":{"control_id":"AIA-Art50","coverage":"partial","delta":"informing persons exposed to emotion-recognition/biometric-categorisation systems omitted","framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-10-f53dd533.json","sourceId":"uc:UC-AI-10","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art50-a9da90b0.json","targetId":"ctrl:eu-ai-act:AIA-Art50","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:da75d8c9c435b8098e7b7df946476f108ce707a0769015d95cddc2f60e660ccb","properties":{"control_id":"AIA-Art21-22","coverage":"partial","delta":"cooperation with competent authorities on request and appointment of an authorised representative for providers established outside the jurisdiction","framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","sourceId":"uc:UC-AI-13","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art21-22-eb4ae796.json","targetId":"ctrl:eu-ai-act:AIA-Art21-22","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ddfda65f8336bc6775be4832e673415b701ff608b644a5db420ccb847c330e14","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art23-25-05f2196c.json","sourceId":"ctrl:eu-ai-act:AIA-Art23-25","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:de7be4ef8f3dc992c1d35022cc508ed3826acbef215b30035b5321e3883791c8","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art17-8b8a64c3.json","sourceId":"ctrl:eu-ai-act:AIA-Art17","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:dfff7d4405e2b41e0103778873b508e00198a737511797eb4510f4be1b5d2111","properties":{"rationale":"Architecture and model documentation helps integrators interface correctly, reducing integration mismatches.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-06-f47eedcb.json","sourceId":"uc:UC-AI-06","targetDetailPath":"/data/v1/records/risk-ai-emergent-integration-risk-8490271c.json","targetId":"risk:ai-emergent-integration-risk","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e038a96012a85371ad6163ae4988cdbf381186e6eb53bddd760aa75bb71d5d01","properties":{"control_id":"AIA-Art20","coverage":"partial","delta":"provider-side corrective action (withdrawal, disabling, recall) of non-conforming systems and information to distributors, deployers, and authorities","framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-11-7112e573.json","sourceId":"uc:UC-AI-11","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art20-ee657bfd.json","targetId":"ctrl:eu-ai-act:AIA-Art20","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e79ff0a9d2787c6074c3ba824d0c2619a9050847fe531869971e71b589cdf0f6","properties":{"control_id":"AIA-Art14","coverage":"full","delta":null,"framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"equal","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-16-b95e2895.json","sourceId":"uc:UC-AI-16","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art14-4b7ae8a7.json","targetId":"ctrl:eu-ai-act:AIA-Art14","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:edc524182fec3365afded04e66505533a46f61f318adf773398145e3a01d5efc","properties":{"control_id":"AIA-Art27","coverage":"full","delta":null,"framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-04-b35afd39.json","sourceId":"uc:UC-AI-04","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art27-7b550500.json","targetId":"ctrl:eu-ai-act:AIA-Art27","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f08b3091da2f2ebef68bbc42112348fdd319a558f738645d33dbdb66a0e005e4","properties":{"control_id":"AIA-Art6-7","coverage":"full","delta":null,"framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-04-b35afd39.json","sourceId":"uc:UC-AI-04","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art6-7-cd7435c0.json","targetId":"ctrl:eu-ai-act:AIA-Art6-7","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f55bf4e1aca81ca451d41d4da594182561ebd78192b68d970d53f115d62848f4","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art16-63a82efa.json","sourceId":"ctrl:eu-ai-act:AIA-Art16","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fb1c8dd28ee831d63f9bbf5d171a0a088378fd7d5d6fc7e7be7195d57e5b27f1","properties":{"control_id":"AIA-Art19","coverage":"full","delta":null,"framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-08-fada68b7.json","sourceId":"uc:UC-AI-08","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art19-55451bfa.json","targetId":"ctrl:eu-ai-act:AIA-Art19","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fe56eb4296e68785198e7c151a8fb322b26fc4012b56da65d167ea60058e3e1f","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art53-fd785909.json","sourceId":"ctrl:eu-ai-act:AIA-Art53","targetDetailPath":"/data/v1/records/std-eu-ai-act-54986689.json","targetId":"std:eu-ai-act","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ff8d2ddaf6053e714102bc6901796960487a9a0406bc17c7f8c41f929e61f829","properties":{"rationale":"Impact assessment plus conformity classification gates unfair benefit/credit/insurance decisions the risk says deploy without required controls.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-04-b35afd39.json","sourceId":"uc:UC-AI-04","targetDetailPath":"/data/v1/records/risk-ai-highrisk-essential-services-46de2ea9.json","targetId":"risk:ai-highrisk-essential-services","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ffa4f8a8ead0dcad2ac47848f3780e11b2f2fb008cc830db6d81c13e79587b42","properties":{"control_id":"AIA-Art5","coverage":"full","delta":null,"framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","sourceId":"uc:UC-AI-12","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art5-53ad83df.json","targetId":"ctrl:eu-ai-act:AIA-Art5","type":"maps_to"}],"schemaVersion":1,"scope":"sources","total":90}