{
 "corpus_date": "2026-10-19",
 "frameworks": [
  {
   "slug": "nist-ai-rmf",
   "name": "NIST AI Risk Management Framework",
   "edition": "version 1.0, January 2023 (NIST AI 100-1)",
   "version": "1.0",
   "publisher": "National Institute of Standards and Technology",
   "license": "public domain (a US government work)",
   "attribution": ""
  },
  {
   "slug": "nist-ai-600-1",
   "name": "NIST Generative AI Profile",
   "edition": "July 2024 (NIST AI 600-1)",
   "version": "2024",
   "publisher": "National Institute of Standards and Technology",
   "license": "public domain (a US government work)",
   "attribution": ""
  },
  {
   "slug": "nist-ai-200-2",
   "name": "NIST TEVV-Athlon Framework for Evaluating AI Systems",
   "edition": "initial public draft, August 2026 (NIST AI 200-2 ipd)",
   "version": "ipd",
   "publisher": "National Institute of Standards and Technology",
   "license": "public domain (a US government work)",
   "attribution": ""
  },
  {
   "slug": "owasp-llm-top-10",
   "name": "OWASP Top 10 for LLM Applications",
   "edition": "2026 edition, August 2026",
   "version": "2026",
   "publisher": "OWASP GenAI Security Project",
   "license": "CC BY-SA 4.0",
   "attribution": "OWASP GenAI Security Project, OWASP Top 10 for LLM Applications 2026, https://genai.owasp.org/resource/owasp-genai-llm-top-10-2026/, licensed CC BY-SA 4.0 (https://creativecommons.org/licenses/by-sa/4.0/). Excerpted: only the first paragraph of each entry's Description is reproduced, verbatim."
  },
  {
   "slug": "owasp-agentic-top-10",
   "name": "OWASP Top 10 for Agentic Applications",
   "edition": "2026 edition, December 2025",
   "version": "2026",
   "publisher": "OWASP GenAI Security Project",
   "license": "CC BY-SA 4.0",
   "attribution": "OWASP GenAI Security Project, Agentic Security Initiative, OWASP Top 10 for Agentic Applications 2026, https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/, licensed CC BY-SA 4.0 (https://creativecommons.org/licenses/by-sa/4.0/). Excerpted: only the first paragraph of each entry's Description is reproduced, verbatim."
  },
  {
   "slug": "mit-ai-risk-mitigations",
   "name": "MIT AI Risk Mitigation Taxonomy",
   "edition": "preliminary taxonomy, July 2025",
   "version": "2025-07-draft",
   "publisher": "MIT AI Risk Initiative",
   "license": "CC BY 4.0",
   "attribution": "MIT AI Risk Initiative (MIT FutureTech), AI Risk Mitigation Taxonomy, https://airisk.mit.edu/ai-risk-mitigations. Data from the MIT AI Risk Initiative is licensed under CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). Cite as: Mapping AI Risk Mitigations: Evidence Scan & Draft Mitigation Taxonomy, https://airisk.mit.edu/blog/mapping-ai-risk-mitigations"
  },
  {
   "slug": "nist-privacy-framework",
   "name": "NIST Privacy Framework",
   "edition": "version 1.0, January 2020",
   "version": "1.0",
   "publisher": "National Institute of Standards and Technology",
   "license": "public domain (a US government work)",
   "attribution": ""
  },
  {
   "slug": "nist-csf",
   "name": "NIST Cybersecurity Framework",
   "edition": "version 2.0, February 2024 (NIST CSWP 29)",
   "version": "2.0",
   "publisher": "National Institute of Standards and Technology",
   "license": "public domain (a US government work)",
   "attribution": ""
  },
  {
   "slug": "finos-ai-governance-framework",
   "name": "FINOS AI Governance Framework",
   "edition": "version 2, as maintained on October 7, 2026",
   "version": "2026-10-07",
   "publisher": "FINOS",
   "license": "CC BY 4.0",
   "attribution": "FINOS AI Governance Framework, https://air-governance-framework.finos.org/, copyright 2025 FINOS, licensed under CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). Titles and purpose text are quoted; markdown emphasis and links were removed."
  },
  {
   "slug": "enisa-nis2-guidance",
   "name": "ENISA NIS2 Technical Implementation Guidance",
   "edition": "version 1.0, June 2025, with mapping table version 1.2",
   "version": "1.0",
   "publisher": "European Union Agency for Cybersecurity (ENISA)",
   "license": "CC BY 4.0",
   "attribution": "ENISA Technical Implementation Guidance on Commission Implementing Regulation (EU) 2024/2690, version 1.0 (June 2025), © European Union Agency for Cybersecurity (ENISA), 2025, licensed under CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). The section titles and requirement text are the Annex to Implementing Regulation (EU) 2024/2690 as ENISA prints it (© European Union, https://eur-lex.europa.eu); each section carries its first point as its text, and ENISA's guidance, examples of evidence and tips are not reproduced."
  },
  {
   "slug": "etsi-en-304-223",
   "name": "ETSI EN 304 223, Baseline Cyber Security Requirements for AI Models and Systems",
   "edition": "version 2.1.1, December 2025",
   "version": "2.1.1",
   "publisher": "European Telecommunications Standards Institute (ETSI)",
   "license": "ETSI's copyright; we print numbers only",
   "attribution": "Identifiers refer to ETSI EN 304 223 V2.1.1 (2025-12), © ETSI 2025, all rights reserved. ETSI owns the standard; no ETSI text (titles or sentences) is reproduced here. The standard is free to download from ETSI (https://www.etsi.org/deliver/etsi_en/304200_304299/304223/02.01.01_60/en_304223v020101p.pdf)."
  }
 ],
 "pairs": [
  {
   "a": "nist-ai-rmf",
   "b": "nist-ai-600-1",
   "file": "nist-ai-rmf--nist-ai-600-1",
   "rows": 65,
   "laws": 481,
   "jurisdictions": 171
  },
  {
   "a": "nist-ai-rmf",
   "b": "nist-ai-200-2",
   "file": "nist-ai-rmf--nist-ai-200-2",
   "rows": 39,
   "laws": 88,
   "jurisdictions": 40
  },
  {
   "a": "nist-ai-rmf",
   "b": "owasp-llm-top-10",
   "file": "nist-ai-rmf--owasp-llm-top-10",
   "rows": 28,
   "laws": 224,
   "jurisdictions": 125
  },
  {
   "a": "nist-ai-rmf",
   "b": "owasp-agentic-top-10",
   "file": "nist-ai-rmf--owasp-agentic-top-10",
   "rows": 29,
   "laws": 266,
   "jurisdictions": 132
  },
  {
   "a": "nist-ai-rmf",
   "b": "mit-ai-risk-mitigations",
   "file": "nist-ai-rmf--mit-ai-risk-mitigations",
   "rows": 143,
   "laws": 481,
   "jurisdictions": 171
  },
  {
   "a": "nist-ai-rmf",
   "b": "nist-privacy-framework",
   "file": "nist-ai-rmf--nist-privacy-framework",
   "rows": 28,
   "laws": 177,
   "jurisdictions": 117
  },
  {
   "a": "nist-ai-rmf",
   "b": "nist-csf",
   "file": "nist-ai-rmf--nist-csf",
   "rows": 2,
   "laws": 10,
   "jurisdictions": 4
  },
  {
   "a": "nist-ai-rmf",
   "b": "finos-ai-governance-framework",
   "file": "nist-ai-rmf--finos-ai-governance-framework",
   "rows": 144,
   "laws": 489,
   "jurisdictions": 176
  },
  {
   "a": "nist-ai-rmf",
   "b": "etsi-en-304-223",
   "file": "nist-ai-rmf--etsi-en-304-223",
   "rows": 115,
   "laws": 435,
   "jurisdictions": 165
  },
  {
   "a": "nist-ai-600-1",
   "b": "nist-ai-200-2",
   "file": "nist-ai-600-1--nist-ai-200-2",
   "rows": 13,
   "laws": 88,
   "jurisdictions": 40
  },
  {
   "a": "nist-ai-600-1",
   "b": "owasp-llm-top-10",
   "file": "nist-ai-600-1--owasp-llm-top-10",
   "rows": 14,
   "laws": 224,
   "jurisdictions": 125
  },
  {
   "a": "nist-ai-600-1",
   "b": "owasp-agentic-top-10",
   "file": "nist-ai-600-1--owasp-agentic-top-10",
   "rows": 15,
   "laws": 266,
   "jurisdictions": 132
  },
  {
   "a": "nist-ai-600-1",
   "b": "mit-ai-risk-mitigations",
   "file": "nist-ai-600-1--mit-ai-risk-mitigations",
   "rows": 76,
   "laws": 481,
   "jurisdictions": 171
  },
  {
   "a": "nist-ai-600-1",
   "b": "nist-privacy-framework",
   "file": "nist-ai-600-1--nist-privacy-framework",
   "rows": 20,
   "laws": 99,
   "jurisdictions": 67
  },
  {
   "a": "nist-ai-600-1",
   "b": "nist-csf",
   "file": "nist-ai-600-1--nist-csf",
   "rows": 3,
   "laws": 10,
   "jurisdictions": 4
  },
  {
   "a": "nist-ai-600-1",
   "b": "finos-ai-governance-framework",
   "file": "nist-ai-600-1--finos-ai-governance-framework",
   "rows": 60,
   "laws": 465,
   "jurisdictions": 171
  },
  {
   "a": "nist-ai-600-1",
   "b": "etsi-en-304-223",
   "file": "nist-ai-600-1--etsi-en-304-223",
   "rows": 63,
   "laws": 436,
   "jurisdictions": 166
  },
  {
   "a": "nist-ai-200-2",
   "b": "owasp-llm-top-10",
   "file": "nist-ai-200-2--owasp-llm-top-10",
   "rows": 10,
   "laws": 79,
   "jurisdictions": 37
  },
  {
   "a": "nist-ai-200-2",
   "b": "owasp-agentic-top-10",
   "file": "nist-ai-200-2--owasp-agentic-top-10",
   "rows": 8,
   "laws": 79,
   "jurisdictions": 37
  },
  {
   "a": "nist-ai-200-2",
   "b": "mit-ai-risk-mitigations",
   "file": "nist-ai-200-2--mit-ai-risk-mitigations",
   "rows": 34,
   "laws": 88,
   "jurisdictions": 40
  },
  {
   "a": "nist-ai-200-2",
   "b": "nist-privacy-framework",
   "file": "nist-ai-200-2--nist-privacy-framework",
   "rows": 14,
   "laws": 15,
   "jurisdictions": 10
  },
  {
   "a": "nist-ai-200-2",
   "b": "nist-csf",
   "file": "nist-ai-200-2--nist-csf",
   "rows": 4,
   "laws": 10,
   "jurisdictions": 4
  },
  {
   "a": "nist-ai-200-2",
   "b": "finos-ai-governance-framework",
   "file": "nist-ai-200-2--finos-ai-governance-framework",
   "rows": 28,
   "laws": 88,
   "jurisdictions": 40
  },
  {
   "a": "nist-ai-200-2",
   "b": "etsi-en-304-223",
   "file": "nist-ai-200-2--etsi-en-304-223",
   "rows": 29,
   "laws": 88,
   "jurisdictions": 40
  },
  {
   "a": "owasp-llm-top-10",
   "b": "owasp-agentic-top-10",
   "file": "owasp-llm-top-10--owasp-agentic-top-10",
   "rows": 14,
   "laws": 224,
   "jurisdictions": 125
  },
  {
   "a": "owasp-llm-top-10",
   "b": "mit-ai-risk-mitigations",
   "file": "owasp-llm-top-10--mit-ai-risk-mitigations",
   "rows": 29,
   "laws": 224,
   "jurisdictions": 125
  },
  {
   "a": "owasp-llm-top-10",
   "b": "nist-privacy-framework",
   "file": "owasp-llm-top-10--nist-privacy-framework",
   "rows": 7,
   "laws": 40,
   "jurisdictions": 32
  },
  {
   "a": "owasp-llm-top-10",
   "b": "nist-csf",
   "file": "owasp-llm-top-10--nist-csf",
   "rows": 5,
   "laws": 10,
   "jurisdictions": 4
  },
  {
   "a": "owasp-llm-top-10",
   "b": "finos-ai-governance-framework",
   "file": "owasp-llm-top-10--finos-ai-governance-framework",
   "rows": 38,
   "laws": 224,
   "jurisdictions": 125
  },
  {
   "a": "owasp-llm-top-10",
   "b": "etsi-en-304-223",
   "file": "owasp-llm-top-10--etsi-en-304-223",
   "rows": 28,
   "laws": 224,
   "jurisdictions": 125
  },
  {
   "a": "owasp-agentic-top-10",
   "b": "mit-ai-risk-mitigations",
   "file": "owasp-agentic-top-10--mit-ai-risk-mitigations",
   "rows": 28,
   "laws": 266,
   "jurisdictions": 132
  },
  {
   "a": "owasp-agentic-top-10",
   "b": "nist-privacy-framework",
   "file": "owasp-agentic-top-10--nist-privacy-framework",
   "rows": 9,
   "laws": 46,
   "jurisdictions": 36
  },
  {
   "a": "owasp-agentic-top-10",
   "b": "nist-csf",
   "file": "owasp-agentic-top-10--nist-csf",
   "rows": 4,
   "laws": 10,
   "jurisdictions": 4
  },
  {
   "a": "owasp-agentic-top-10",
   "b": "finos-ai-governance-framework",
   "file": "owasp-agentic-top-10--finos-ai-governance-framework",
   "rows": 31,
   "laws": 247,
   "jurisdictions": 130
  },
  {
   "a": "owasp-agentic-top-10",
   "b": "etsi-en-304-223",
   "file": "owasp-agentic-top-10--etsi-en-304-223",
   "rows": 24,
   "laws": 247,
   "jurisdictions": 130
  },
  {
   "a": "mit-ai-risk-mitigations",
   "b": "nist-privacy-framework",
   "file": "mit-ai-risk-mitigations--nist-privacy-framework",
   "rows": 45,
   "laws": 99,
   "jurisdictions": 67
  },
  {
   "a": "mit-ai-risk-mitigations",
   "b": "nist-csf",
   "file": "mit-ai-risk-mitigations--nist-csf",
   "rows": 8,
   "laws": 10,
   "jurisdictions": 4
  },
  {
   "a": "mit-ai-risk-mitigations",
   "b": "finos-ai-governance-framework",
   "file": "mit-ai-risk-mitigations--finos-ai-governance-framework",
   "rows": 120,
   "laws": 465,
   "jurisdictions": 171
  },
  {
   "a": "mit-ai-risk-mitigations",
   "b": "etsi-en-304-223",
   "file": "mit-ai-risk-mitigations--etsi-en-304-223",
   "rows": 129,
   "laws": 436,
   "jurisdictions": 166
  },
  {
   "a": "nist-privacy-framework",
   "b": "nist-csf",
   "file": "nist-privacy-framework--nist-csf",
   "rows": 98,
   "laws": 398,
   "jurisdictions": 177
  },
  {
   "a": "nist-privacy-framework",
   "b": "finos-ai-governance-framework",
   "file": "nist-privacy-framework--finos-ai-governance-framework",
   "rows": 340,
   "laws": 1063,
   "jurisdictions": 199
  },
  {
   "a": "nist-privacy-framework",
   "b": "enisa-nis2-guidance",
   "file": "nist-privacy-framework--enisa-nis2-guidance",
   "rows": 113,
   "laws": 176,
   "jurisdictions": 91
  },
  {
   "a": "nist-privacy-framework",
   "b": "etsi-en-304-223",
   "file": "nist-privacy-framework--etsi-en-304-223",
   "rows": 37,
   "laws": 95,
   "jurisdictions": 66
  },
  {
   "a": "nist-csf",
   "b": "finos-ai-governance-framework",
   "file": "nist-csf--finos-ai-governance-framework",
   "rows": 300,
   "laws": 469,
   "jurisdictions": 177
  },
  {
   "a": "nist-csf",
   "b": "enisa-nis2-guidance",
   "file": "nist-csf--enisa-nis2-guidance",
   "rows": 294,
   "laws": 276,
   "jurisdictions": 112
  },
  {
   "a": "nist-csf",
   "b": "etsi-en-304-223",
   "file": "nist-csf--etsi-en-304-223",
   "rows": 8,
   "laws": 10,
   "jurisdictions": 4
  },
  {
   "a": "finos-ai-governance-framework",
   "b": "enisa-nis2-guidance",
   "file": "finos-ai-governance-framework--enisa-nis2-guidance",
   "rows": 226,
   "laws": 276,
   "jurisdictions": 112
  },
  {
   "a": "finos-ai-governance-framework",
   "b": "etsi-en-304-223",
   "file": "finos-ai-governance-framework--etsi-en-304-223",
   "rows": 104,
   "laws": 436,
   "jurisdictions": 166
  }
 ]
}