Law / Frameworks / Crosswalk / OWASP LLM Top 10 to NIST AI 200-2
The OWASP Top 10 for LLM Applications, mapped to the NIST TEVV-Athlon Framework for Evaluating AI Systems
5 of OWASP LLM Top 10's controls connect to 3 of NIST AI 200-2's through 79 laws in 37 jurisdictions. Two controls connect when the same duties, in at least 2 laws we track, reach both. The connections are our own reading of the law; no framework publisher has reviewed or endorsed them.
- From
- OWASP Top 10 for LLM Applications, 2026 edition, August 2026, OWASP GenAI Security Project
- To
- NIST TEVV-Athlon Framework for Evaluating AI Systems, initial public draft, August 2026 (NIST AI 200-2 ipd), National Institute of Standards and Technology
- See also
- NIST AI 200-2 to OWASP LLM Top 10, the other way · every pair in the crosswalk · law library as of
Download this mapping, with every law behind each connection: nist-ai-200-2--owasp-llm-top-10.csv · nist-ai-200-2--owasp-llm-top-10.json
Not connected to the NIST AI 200-2: 5 of OWASP LLM Top 10's controls
No law we track reaches these
No duty in the laws we track reaches these controls.
- LLM06:2026 Unbounded Consumption
- LLM07:2026 Misinformation
- LLM08:2026 Hidden Context Exposure
- LLM09:2026 Vector and Embedding Weaknesses
- LLM10:2026 Improper Output Handling
How these connections are drawn
Each requirement line in the laws we track is read against the framework for its subject (the AI, scraping and news aggregation laws against the NIST AI RMF, the privacy, communications and age assurance laws against the NIST Privacy Framework, the cybersecurity laws against the NIST CSF 2.0); laws on liability and content moderation are not read against any framework yet. A line reaches either framework through a kind of duty its law carries, and only where that kind of duty also reaches, on that same line, the NIST framework for the line's own subject. Two controls connect when lines in at least 2 laws reach both. That says the same duties reach both; it does not say the two are alike, or that running either one does what a law asks.
Every duty line in the AI, scraping and news aggregation laws we track has been read against the framework for its subject.
Sources and licenses
OWASP GenAI Security Project, OWASP Top 10 for LLM Applications 2026, licensed CC BY-SA 4.0. Excerpted: only the first paragraph of each entry's Description is reproduced, verbatim.