{ "$schema_version": "1.0", "description": "Flattened ontology: nodes and typed relationships.", "updated": "2026-06-14", "nodes": [ { "id": "srf.framework.cosai-srf", "label": "CoSAI AI Shared Responsibility Framework", "type": "framework", "url": "https://aisharedresponsibility.com/framework/", "related": [ "srf.concept.accountability", "srf.concept.accountable-party", "srf.concept.agentic-system", "srf.concept.autonomy-level", "srf.concept.control", "srf.concept.control-schema", "srf.concept.evidence-threshold", "srf.concept.human-override-tier", "srf.concept.layer", "srf.concept.ocsf", "srf.concept.operating-model", "srf.concept.persona", "srf.concept.raci", "srf.concept.responsibility-cascade", "srf.concept.shared-responsibility", "srf.layer.L1", "srf.layer.L2", "srf.layer.L3", "srf.layer.L4", "srf.layer.L5", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas" ] }, { "id": "srf.layer.L1", "label": "L1 AI Business & Usage", "type": "concept", "url": "https://aisharedresponsibility.com/framework/#L1", "related": [ "ext.framework.csa-aicm", "ext.framework.eu-ai-act", "ext.framework.fda-ai-ml", "ext.framework.gdpr", "ext.framework.iso-22989", "ext.framework.iso-42001", "ext.framework.nist-ai-600-1", "ext.framework.nist-ai-rmf", "ext.framework.nist-csf-2", "ext.framework.nistir-8605a", "ext.framework.sr-26-2", "srf.control.defense.SRF-L1-ACQ-001", "srf.control.defense.SRF-L1-ACQ-002", "srf.control.defense.SRF-L1-ACQ-003", "srf.control.defense.SRF-L1-ACQ-004", "srf.control.defense.SRF-L1-ACQ-005", "srf.control.defense.SRF-L1-ACQ-006", "srf.control.defense.SRF-L1-ACQ-007", "srf.control.defense.SRF-L1-ACQ-009", "srf.control.defense.SRF-L1-OPS-008", "srf.control.defense.SRF-L1-OVR-011", "srf.control.defense.SRF-L1-TEVV-010", "srf.control.finance.SRF-L1-DEV-001", "srf.control.finance.SRF-L1-DEV-002", "srf.control.finance.SRF-L1-DEV-003", "srf.control.finance.SRF-L1-DEV-004", "srf.control.finance.SRF-L1-ECH-001", "srf.control.finance.SRF-L1-MON-001", "srf.control.finance.SRF-L1-MON-002", "srf.control.finance.SRF-L1-MON-003", "srf.control.finance.SRF-L1-VAL-001", "srf.control.healthcare.SRF-L1-DEV-001", "srf.control.healthcare.SRF-L1-DEV-002", "srf.control.healthcare.SRF-L1-DEV-003", "srf.control.healthcare.SRF-L1-HOR-001", "srf.control.healthcare.SRF-L1-HOR-002", "srf.control.healthcare.SRF-L1-HOR-003", "srf.control.healthcare.SRF-L1-PMS-001", "srf.control.healthcare.SRF-L1-PMS-002", "srf.control.healthcare.SRF-L1-PMS-003", "srf.control.insurance.SRF-L1-DEV-001", "srf.control.insurance.SRF-L1-DEV-002", "srf.control.insurance.SRF-L1-DEV-003", "srf.control.insurance.SRF-L1-DEV-004", "srf.control.insurance.SRF-L1-DEV-005", "srf.control.insurance.SRF-L1-MON-001", "srf.control.insurance.SRF-L1-MON-002", "srf.control.insurance.SRF-L1-TPO-001", "srf.control.insurance.SRF-L1-TPO-002", "srf.control.manufacturing.SRF-L1-CHG-009", "srf.control.manufacturing.SRF-L1-CHG-010", "srf.control.manufacturing.SRF-L1-DES-001", "srf.control.manufacturing.SRF-L1-DES-002", "srf.control.manufacturing.SRF-L1-DES-003", "srf.control.manufacturing.SRF-L1-DES-006", "srf.control.manufacturing.SRF-L1-DES-008", "srf.control.manufacturing.SRF-L1-OPS-005", "srf.control.manufacturing.SRF-L1-OPS-007", "srf.control.manufacturing.SRF-L1-VAL-004", "srf.control.public-sector.SRF-L1-ACQ-001", "srf.control.public-sector.SRF-L1-ACQ-002", "srf.control.public-sector.SRF-L1-ACQ-003", "srf.control.public-sector.SRF-L1-ACQ-004", "srf.control.public-sector.SRF-L1-ACQ-007", "srf.control.public-sector.SRF-L1-ACQ-008", "srf.control.public-sector.SRF-L1-MON-005", "srf.control.public-sector.SRF-L1-MON-009", "srf.control.public-sector.SRF-L1-OVR-006", "srf.framework.cosai-srf", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas", "srf.role.ai-system-governance", "srf.role.ai-system-users" ], "subtype": "layer" }, { "id": "srf.layer.L2", "label": "L2 AI Information", "type": "concept", "url": "https://aisharedresponsibility.com/framework/#L2", "related": [ "ext.framework.csa-aicm", "ext.framework.eu-ai-act", "ext.framework.gdpr", "ext.framework.iso-22989", "ext.framework.iso-42001", "ext.framework.nist-ai-600-1", "ext.framework.nist-ai-rmf", "ext.framework.nist-csf-2", "ext.framework.nistir-8605a", "ext.framework.sr-26-2", "srf.control.defense.SRF-L2-ACQ-001", "srf.control.defense.SRF-L2-ACQ-003", "srf.control.defense.SRF-L2-ACQ-008", "srf.control.defense.SRF-L2-OPS-002", "srf.control.defense.SRF-L2-OPS-004", "srf.control.defense.SRF-L2-OPS-005", "srf.control.defense.SRF-L2-OPS-006", "srf.control.defense.SRF-L2-OPS-007", "srf.control.defense.SRF-L2-OVR-010", "srf.control.defense.SRF-L2-TEVV-009", "srf.control.finance.SRF-L2-DEV-001", "srf.control.finance.SRF-L2-DEV-002", "srf.control.finance.SRF-L2-DEV-003", "srf.control.finance.SRF-L2-ECH-001", "srf.control.finance.SRF-L2-MON-001", "srf.control.finance.SRF-L2-MON-002", "srf.control.finance.SRF-L2-MON-003", "srf.control.finance.SRF-L2-VAL-001", "srf.control.healthcare.SRF-L2-DEV-001", "srf.control.healthcare.SRF-L2-DEV-002", "srf.control.healthcare.SRF-L2-DEV-003", "srf.control.healthcare.SRF-L2-PMS-001", "srf.control.healthcare.SRF-L2-PMS-002", "srf.control.healthcare.SRF-L2-PMS-003", "srf.control.healthcare.SRF-L2-VV-001", "srf.control.healthcare.SRF-L2-VV-002", "srf.control.insurance.SRF-L2-DEV-001", "srf.control.insurance.SRF-L2-DEV-002", "srf.control.insurance.SRF-L2-DEV-003", "srf.control.insurance.SRF-L2-MON-001", "srf.control.insurance.SRF-L2-MON-002", "srf.control.insurance.SRF-L2-MON-003", "srf.control.insurance.SRF-L2-TPO-001", "srf.control.insurance.SRF-L2-VAL-001", "srf.control.manufacturing.SRF-L2-DES-001", "srf.control.manufacturing.SRF-L2-DES-002", "srf.control.manufacturing.SRF-L2-OPS-003", "srf.control.manufacturing.SRF-L2-OPS-004", "srf.control.manufacturing.SRF-L2-OPS-006", "srf.control.manufacturing.SRF-L2-OPS-007", "srf.control.manufacturing.SRF-L2-OPS-008", "srf.control.manufacturing.SRF-L2-VAL-005", "srf.control.public-sector.SRF-L2-ACQ-001", "srf.control.public-sector.SRF-L2-ACQ-002", "srf.control.public-sector.SRF-L2-ACQ-003", "srf.control.public-sector.SRF-L2-ACQ-005", "srf.control.public-sector.SRF-L2-ACQ-008", "srf.control.public-sector.SRF-L2-MON-004", "srf.control.public-sector.SRF-L2-MON-006", "srf.control.public-sector.SRF-L2-MON-007", "srf.framework.cosai-srf", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas", "srf.role.data-provider" ], "subtype": "layer" }, { "id": "srf.layer.L3", "label": "L3 AI Application", "type": "concept", "url": "https://aisharedresponsibility.com/framework/#L3", "related": [ "ext.framework.csa-aicm", "ext.framework.eu-ai-act", "ext.framework.fda-ai-ml", "ext.framework.iso-22989", "ext.framework.iso-42001", "ext.framework.mitre-atlas", "ext.framework.nist-ai-600-1", "ext.framework.nist-ai-rmf", "ext.framework.nist-csf-2", "ext.framework.nistir-8605a", "ext.framework.owasp-llm-top10", "srf.control.defense.SRF-L3-ACQ-008", "srf.control.defense.SRF-L3-OPS-006", "srf.control.defense.SRF-L3-OPS-007", "srf.control.defense.SRF-L3-OPS-009", "srf.control.defense.SRF-L3-OVR-003", "srf.control.defense.SRF-L3-OVR-004", "srf.control.defense.SRF-L3-OVR-005", "srf.control.defense.SRF-L3-TEVV-001", "srf.control.defense.SRF-L3-TEVV-002", "srf.control.defense.SRF-L3-TEVV-010", "srf.control.defense.SRF-L3-TEVV-011", "srf.control.finance.SRF-L3-DEV-001", "srf.control.finance.SRF-L3-DEV-002", "srf.control.finance.SRF-L3-DEV-003", "srf.control.finance.SRF-L3-ECH-001", "srf.control.finance.SRF-L3-MON-001", "srf.control.finance.SRF-L3-MON-002", "srf.control.finance.SRF-L3-MON-003", "srf.control.finance.SRF-L3-VAL-001", "srf.control.healthcare.SRF-L3-DEV-001", "srf.control.healthcare.SRF-L3-DEV-002", "srf.control.healthcare.SRF-L3-DEV-003", "srf.control.healthcare.SRF-L3-PMS-001", "srf.control.healthcare.SRF-L3-PMS-002", "srf.control.healthcare.SRF-L3-PMS-003", "srf.control.healthcare.SRF-L3-VV-001", "srf.control.healthcare.SRF-L3-VV-002", "srf.control.insurance.SRF-L3-DEV-001", "srf.control.insurance.SRF-L3-DEV-002", "srf.control.insurance.SRF-L3-MON-001", "srf.control.insurance.SRF-L3-MON-002", "srf.control.insurance.SRF-L3-TPO-001", "srf.control.insurance.SRF-L3-VAL-001", "srf.control.insurance.SRF-L3-VAL-002", "srf.control.insurance.SRF-L3-VAL-003", "srf.control.manufacturing.SRF-L3-OPS-003", "srf.control.manufacturing.SRF-L3-OPS-008", "srf.control.manufacturing.SRF-L3-OPS-009", "srf.control.manufacturing.SRF-L3-OPS-010", "srf.control.manufacturing.SRF-L3-VAL-001", "srf.control.manufacturing.SRF-L3-VAL-002", "srf.control.manufacturing.SRF-L3-VAL-004", "srf.control.manufacturing.SRF-L3-VAL-005", "srf.control.manufacturing.SRF-L3-VAL-006", "srf.control.manufacturing.SRF-L3-VAL-007", "srf.control.public-sector.SRF-L3-MON-006", "srf.control.public-sector.SRF-L3-OVR-004", "srf.control.public-sector.SRF-L3-OVR-005", "srf.control.public-sector.SRF-L3-OVR-008", "srf.control.public-sector.SRF-L3-VAL-001", "srf.control.public-sector.SRF-L3-VAL-002", "srf.control.public-sector.SRF-L3-VAL-003", "srf.control.public-sector.SRF-L3-VAL-007", "srf.framework.cosai-srf", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas", "srf.role.agentic-platform-provider", "srf.role.application-developer" ], "subtype": "layer" }, { "id": "srf.layer.L4", "label": "L4 AI Platform", "type": "concept", "url": "https://aisharedresponsibility.com/framework/#L4", "related": [ "ext.framework.csa-aicm", "ext.framework.iso-22989", "ext.framework.iso-42001", "ext.framework.mitre-atlas", "ext.framework.nist-ai-600-1", "ext.framework.nist-ai-rmf", "ext.framework.nist-csf-2", "ext.framework.nistir-8605a", "ext.framework.owasp-llm-top10", "srf.control.defense.SRF-L4-ACQ-001", "srf.control.defense.SRF-L4-ACQ-002", "srf.control.defense.SRF-L4-ACQ-003", "srf.control.defense.SRF-L4-ACQ-007", "srf.control.defense.SRF-L4-ACQ-008", "srf.control.defense.SRF-L4-OPS-004", "srf.control.defense.SRF-L4-OPS-005", "srf.control.defense.SRF-L4-OPS-006", "srf.control.defense.SRF-L4-OPS-009", "srf.control.defense.SRF-L4-OPS-010", "srf.control.defense.SRF-L4-OVR-012", "srf.control.defense.SRF-L4-TEVV-011", "srf.control.finance.SRF-L4-DEV-001", "srf.control.finance.SRF-L4-DEV-002", "srf.control.finance.SRF-L4-DEV-003", "srf.control.finance.SRF-L4-ECH-001", "srf.control.finance.SRF-L4-MON-001", "srf.control.finance.SRF-L4-MON-002", "srf.control.finance.SRF-L4-MON-003", "srf.control.finance.SRF-L4-VAL-001", "srf.control.healthcare.SRF-L4-DEV-001", "srf.control.healthcare.SRF-L4-DEV-002", "srf.control.healthcare.SRF-L4-DEV-003", "srf.control.healthcare.SRF-L4-PMS-001", "srf.control.healthcare.SRF-L4-PMS-002", "srf.control.healthcare.SRF-L4-PMS-003", "srf.control.healthcare.SRF-L4-VV-001", "srf.control.healthcare.SRF-L4-VV-002", "srf.control.insurance.SRF-L4-DEV-001", "srf.control.insurance.SRF-L4-DEV-002", "srf.control.insurance.SRF-L4-DEV-003", "srf.control.insurance.SRF-L4-MON-001", "srf.control.insurance.SRF-L4-MON-002", "srf.control.insurance.SRF-L4-MON-003", "srf.control.insurance.SRF-L4-TPO-001", "srf.control.insurance.SRF-L4-VAL-001", "srf.control.manufacturing.SRF-L4-CHG-004", "srf.control.manufacturing.SRF-L4-DES-001", "srf.control.manufacturing.SRF-L4-DES-002", "srf.control.manufacturing.SRF-L4-DES-008", "srf.control.manufacturing.SRF-L4-OPS-003", "srf.control.manufacturing.SRF-L4-OPS-005", "srf.control.manufacturing.SRF-L4-OPS-006", "srf.control.manufacturing.SRF-L4-OPS-007", "srf.control.manufacturing.SRF-L4-OPS-009", "srf.control.public-sector.SRF-L4-ACQ-001", "srf.control.public-sector.SRF-L4-ACQ-002", "srf.control.public-sector.SRF-L4-ACQ-003", "srf.control.public-sector.SRF-L4-MON-004", "srf.control.public-sector.SRF-L4-MON-005", "srf.control.public-sector.SRF-L4-MON-006", "srf.control.public-sector.SRF-L4-MON-008", "srf.control.public-sector.SRF-L4-VAL-007", "srf.framework.cosai-srf", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas", "srf.role.agentic-platform-provider", "srf.role.ai-model-serving", "srf.role.ai-platform-provider" ], "subtype": "layer" }, { "id": "srf.layer.L5", "label": "L5 AI Model Provider", "type": "concept", "url": "https://aisharedresponsibility.com/framework/#L5", "related": [ "ext.framework.csa-aicm", "ext.framework.eu-ai-act", "ext.framework.fda-ai-ml", "ext.framework.iso-22989", "ext.framework.iso-42001", "ext.framework.mitre-atlas", "ext.framework.nist-ai-600-1", "ext.framework.nist-ai-rmf", "ext.framework.nistir-8605a", "ext.framework.owasp-llm-top10", "ext.framework.sr-26-2", "srf.control.defense.SRF-L5-ACQ-001", "srf.control.defense.SRF-L5-ACQ-003", "srf.control.defense.SRF-L5-ACQ-005", "srf.control.defense.SRF-L5-ACQ-007", "srf.control.defense.SRF-L5-ACQ-008", "srf.control.defense.SRF-L5-OPS-002", "srf.control.defense.SRF-L5-OPS-004", "srf.control.defense.SRF-L5-OPS-006", "srf.control.defense.SRF-L5-TEVV-009", "srf.control.finance.SRF-L5-DEV-001", "srf.control.finance.SRF-L5-DEV-002", "srf.control.finance.SRF-L5-DEV-003", "srf.control.finance.SRF-L5-ECH-001", "srf.control.finance.SRF-L5-MON-001", "srf.control.finance.SRF-L5-MON-002", "srf.control.finance.SRF-L5-VAL-001", "srf.control.healthcare.SRF-L5-DEV-001", "srf.control.healthcare.SRF-L5-DEV-002", "srf.control.healthcare.SRF-L5-DEV-003", "srf.control.healthcare.SRF-L5-PMS-001", "srf.control.healthcare.SRF-L5-PMS-002", "srf.control.healthcare.SRF-L5-VV-001", "srf.control.healthcare.SRF-L5-VV-002", "srf.control.insurance.SRF-L5-DEV-001", "srf.control.insurance.SRF-L5-DEV-002", "srf.control.insurance.SRF-L5-MON-001", "srf.control.insurance.SRF-L5-MON-002", "srf.control.insurance.SRF-L5-TPO-001", "srf.control.insurance.SRF-L5-VAL-001", "srf.control.insurance.SRF-L5-VAL-002", "srf.control.manufacturing.SRF-L5-CHG-003", "srf.control.manufacturing.SRF-L5-DES-005", "srf.control.manufacturing.SRF-L5-DES-007", "srf.control.manufacturing.SRF-L5-DES-008", "srf.control.manufacturing.SRF-L5-OPS-002", "srf.control.manufacturing.SRF-L5-OPS-004", "srf.control.manufacturing.SRF-L5-VAL-001", "srf.control.manufacturing.SRF-L5-VAL-006", "srf.control.public-sector.SRF-L5-ACQ-001", "srf.control.public-sector.SRF-L5-ACQ-003", "srf.control.public-sector.SRF-L5-ACQ-005", "srf.control.public-sector.SRF-L5-MON-002", "srf.control.public-sector.SRF-L5-MON-004", "srf.control.public-sector.SRF-L5-MON-006", "srf.control.public-sector.SRF-L5-MON-007", "srf.framework.cosai-srf", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas", "srf.role.model-provider" ], "subtype": "layer" }, { "id": "srf.opmodel.ai-saas", "label": "AI-Enabled SaaS", "type": "concept", "url": "https://aisharedresponsibility.com/operating-models/#AI-SaaS", "related": [ "srf.control.defense.SRF-L1-ACQ-001", "srf.control.defense.SRF-L1-ACQ-002", "srf.control.defense.SRF-L1-ACQ-003", "srf.control.defense.SRF-L1-ACQ-004", "srf.control.defense.SRF-L1-ACQ-005", "srf.control.defense.SRF-L1-ACQ-006", "srf.control.defense.SRF-L1-ACQ-007", "srf.control.defense.SRF-L1-ACQ-009", "srf.control.defense.SRF-L1-OPS-008", "srf.control.defense.SRF-L1-OVR-011", "srf.control.defense.SRF-L1-TEVV-010", "srf.control.defense.SRF-L2-ACQ-001", "srf.control.defense.SRF-L2-ACQ-003", "srf.control.defense.SRF-L2-ACQ-008", "srf.control.defense.SRF-L2-OPS-002", "srf.control.defense.SRF-L2-OPS-004", "srf.control.defense.SRF-L2-OPS-005", "srf.control.defense.SRF-L2-OPS-006", "srf.control.defense.SRF-L2-OPS-007", "srf.control.defense.SRF-L2-TEVV-009", "srf.control.defense.SRF-L3-ACQ-008", "srf.control.defense.SRF-L3-OPS-007", "srf.control.defense.SRF-L3-OPS-009", "srf.control.defense.SRF-L3-OVR-004", "srf.control.defense.SRF-L3-OVR-005", "srf.control.defense.SRF-L3-TEVV-001", "srf.control.defense.SRF-L3-TEVV-002", "srf.control.defense.SRF-L3-TEVV-010", "srf.control.defense.SRF-L3-TEVV-011", "srf.control.defense.SRF-L4-ACQ-001", "srf.control.defense.SRF-L4-ACQ-002", "srf.control.defense.SRF-L4-ACQ-003", "srf.control.defense.SRF-L4-ACQ-007", "srf.control.defense.SRF-L4-OPS-004", "srf.control.defense.SRF-L4-OPS-005", "srf.control.defense.SRF-L4-OPS-006", "srf.control.defense.SRF-L4-OPS-009", "srf.control.defense.SRF-L4-OPS-010", "srf.control.defense.SRF-L4-TEVV-011", "srf.control.defense.SRF-L5-ACQ-001", "srf.control.defense.SRF-L5-ACQ-005", "srf.control.defense.SRF-L5-ACQ-008", "srf.control.defense.SRF-L5-OPS-002", "srf.control.defense.SRF-L5-OPS-004", "srf.control.defense.SRF-L5-OPS-006", "srf.control.defense.SRF-L5-TEVV-009", "srf.control.finance.SRF-L1-DEV-001", "srf.control.finance.SRF-L1-DEV-002", "srf.control.finance.SRF-L1-DEV-003", "srf.control.finance.SRF-L1-ECH-001", "srf.control.finance.SRF-L1-MON-001", "srf.control.finance.SRF-L1-MON-002", "srf.control.finance.SRF-L1-MON-003", "srf.control.finance.SRF-L1-VAL-001", "srf.control.finance.SRF-L2-DEV-002", "srf.control.finance.SRF-L2-MON-002", "srf.control.finance.SRF-L3-DEV-001", "srf.control.finance.SRF-L3-DEV-002", "srf.control.finance.SRF-L3-ECH-001", "srf.control.finance.SRF-L3-MON-001", "srf.control.finance.SRF-L3-MON-002", "srf.control.finance.SRF-L3-VAL-001", "srf.control.finance.SRF-L4-DEV-001", "srf.control.finance.SRF-L4-DEV-002", "srf.control.finance.SRF-L4-ECH-001", "srf.control.finance.SRF-L4-MON-001", "srf.control.finance.SRF-L4-MON-002", "srf.control.finance.SRF-L4-VAL-001", "srf.control.insurance.SRF-L1-DEV-001", "srf.control.insurance.SRF-L1-DEV-002", "srf.control.insurance.SRF-L1-DEV-003", "srf.control.insurance.SRF-L1-DEV-004", "srf.control.insurance.SRF-L1-DEV-005", "srf.control.insurance.SRF-L1-MON-001", "srf.control.insurance.SRF-L1-MON-002", "srf.control.insurance.SRF-L1-TPO-001", "srf.control.insurance.SRF-L1-TPO-002", "srf.control.insurance.SRF-L2-DEV-001", "srf.control.insurance.SRF-L2-DEV-002", "srf.control.insurance.SRF-L2-TPO-001", "srf.control.insurance.SRF-L2-VAL-001", "srf.control.insurance.SRF-L3-DEV-001", "srf.control.insurance.SRF-L3-MON-001", "srf.control.insurance.SRF-L3-MON-002", "srf.control.insurance.SRF-L3-TPO-001", "srf.control.insurance.SRF-L3-VAL-001", "srf.control.insurance.SRF-L3-VAL-002", "srf.control.insurance.SRF-L4-DEV-002", "srf.control.insurance.SRF-L4-DEV-003", "srf.control.insurance.SRF-L4-MON-002", "srf.control.insurance.SRF-L4-TPO-001", "srf.control.insurance.SRF-L4-VAL-001", "srf.control.insurance.SRF-L5-TPO-001", "srf.control.manufacturing.SRF-L1-CHG-009", "srf.control.manufacturing.SRF-L1-DES-001", "srf.control.manufacturing.SRF-L1-DES-002", "srf.control.manufacturing.SRF-L1-DES-003", "srf.control.manufacturing.SRF-L1-DES-006", "srf.control.manufacturing.SRF-L1-DES-008", "srf.control.manufacturing.SRF-L1-OPS-005", "srf.control.manufacturing.SRF-L1-OPS-007", "srf.control.manufacturing.SRF-L2-DES-002", "srf.control.manufacturing.SRF-L2-OPS-004", "srf.control.manufacturing.SRF-L2-OPS-007", "srf.control.manufacturing.SRF-L2-OPS-008", "srf.control.manufacturing.SRF-L2-VAL-005", "srf.control.manufacturing.SRF-L3-OPS-009", "srf.control.manufacturing.SRF-L3-OPS-010", "srf.control.manufacturing.SRF-L4-OPS-007", "srf.control.manufacturing.SRF-L4-OPS-009", "srf.control.manufacturing.SRF-L5-CHG-003", "srf.control.manufacturing.SRF-L5-DES-007", "srf.control.manufacturing.SRF-L5-OPS-002", "srf.control.manufacturing.SRF-L5-OPS-004", "srf.control.public-sector.SRF-L1-ACQ-001", "srf.control.public-sector.SRF-L1-ACQ-002", "srf.control.public-sector.SRF-L1-ACQ-003", "srf.control.public-sector.SRF-L1-ACQ-004", "srf.control.public-sector.SRF-L1-ACQ-007", "srf.control.public-sector.SRF-L1-ACQ-008", "srf.control.public-sector.SRF-L1-MON-005", "srf.control.public-sector.SRF-L1-MON-009", "srf.control.public-sector.SRF-L1-OVR-006", "srf.control.public-sector.SRF-L2-ACQ-001", "srf.control.public-sector.SRF-L2-ACQ-002", "srf.control.public-sector.SRF-L2-ACQ-003", "srf.control.public-sector.SRF-L2-ACQ-005", "srf.control.public-sector.SRF-L2-ACQ-008", "srf.control.public-sector.SRF-L2-MON-004", "srf.control.public-sector.SRF-L2-MON-006", "srf.control.public-sector.SRF-L2-MON-007", "srf.control.public-sector.SRF-L3-OVR-004", "srf.control.public-sector.SRF-L3-OVR-005", "srf.control.public-sector.SRF-L3-OVR-008", "srf.control.public-sector.SRF-L3-VAL-001", "srf.control.public-sector.SRF-L3-VAL-002", "srf.control.public-sector.SRF-L3-VAL-003", "srf.control.public-sector.SRF-L4-ACQ-001", "srf.control.public-sector.SRF-L4-ACQ-002", "srf.control.public-sector.SRF-L4-ACQ-003", "srf.control.public-sector.SRF-L4-MON-004", "srf.control.public-sector.SRF-L4-MON-005", "srf.control.public-sector.SRF-L4-MON-006", "srf.control.public-sector.SRF-L4-MON-008", "srf.control.public-sector.SRF-L4-VAL-007", "srf.control.public-sector.SRF-L5-ACQ-001", "srf.control.public-sector.SRF-L5-ACQ-005", "srf.control.public-sector.SRF-L5-MON-002", "srf.control.public-sector.SRF-L5-MON-004", "srf.control.public-sector.SRF-L5-MON-006", "srf.control.public-sector.SRF-L5-MON-007", "srf.framework.cosai-srf", "srf.layer.L1", "srf.layer.L2", "srf.layer.L3", "srf.layer.L4", "srf.layer.L5" ], "subtype": "operating-model" }, { "id": "srf.opmodel.ai-paas", "label": "AI Platform as a Service", "type": "concept", "url": "https://aisharedresponsibility.com/operating-models/#AI-PaaS", "related": [ "srf.control.defense.SRF-L1-ACQ-001", "srf.control.defense.SRF-L1-ACQ-002", "srf.control.defense.SRF-L1-ACQ-003", "srf.control.defense.SRF-L1-ACQ-004", "srf.control.defense.SRF-L1-ACQ-005", "srf.control.defense.SRF-L1-ACQ-006", "srf.control.defense.SRF-L1-ACQ-007", "srf.control.defense.SRF-L1-ACQ-009", "srf.control.defense.SRF-L1-OPS-008", "srf.control.defense.SRF-L1-OVR-011", "srf.control.defense.SRF-L1-TEVV-010", "srf.control.defense.SRF-L2-ACQ-001", "srf.control.defense.SRF-L2-ACQ-003", "srf.control.defense.SRF-L2-ACQ-008", "srf.control.defense.SRF-L2-OPS-002", "srf.control.defense.SRF-L2-OPS-004", "srf.control.defense.SRF-L2-OPS-005", "srf.control.defense.SRF-L2-OPS-006", "srf.control.defense.SRF-L2-OPS-007", "srf.control.defense.SRF-L2-OVR-010", "srf.control.defense.SRF-L2-TEVV-009", "srf.control.defense.SRF-L3-ACQ-008", "srf.control.defense.SRF-L3-OPS-007", "srf.control.defense.SRF-L3-OPS-009", "srf.control.defense.SRF-L3-OVR-004", "srf.control.defense.SRF-L3-OVR-005", "srf.control.defense.SRF-L3-TEVV-001", "srf.control.defense.SRF-L3-TEVV-002", "srf.control.defense.SRF-L3-TEVV-010", "srf.control.defense.SRF-L3-TEVV-011", "srf.control.defense.SRF-L4-ACQ-001", "srf.control.defense.SRF-L4-ACQ-002", "srf.control.defense.SRF-L4-ACQ-003", "srf.control.defense.SRF-L4-ACQ-007", "srf.control.defense.SRF-L4-ACQ-008", "srf.control.defense.SRF-L4-OPS-004", "srf.control.defense.SRF-L4-OPS-005", "srf.control.defense.SRF-L4-OPS-006", "srf.control.defense.SRF-L4-OPS-009", "srf.control.defense.SRF-L4-OPS-010", "srf.control.defense.SRF-L4-OVR-012", "srf.control.defense.SRF-L4-TEVV-011", "srf.control.defense.SRF-L5-ACQ-001", "srf.control.defense.SRF-L5-ACQ-003", "srf.control.defense.SRF-L5-ACQ-005", "srf.control.defense.SRF-L5-ACQ-008", "srf.control.defense.SRF-L5-OPS-002", "srf.control.defense.SRF-L5-OPS-004", "srf.control.defense.SRF-L5-OPS-006", "srf.control.defense.SRF-L5-TEVV-009", "srf.control.finance.SRF-L1-DEV-001", "srf.control.finance.SRF-L1-DEV-002", "srf.control.finance.SRF-L1-DEV-003", "srf.control.finance.SRF-L1-ECH-001", "srf.control.finance.SRF-L1-MON-001", "srf.control.finance.SRF-L1-MON-002", "srf.control.finance.SRF-L1-MON-003", "srf.control.finance.SRF-L1-VAL-001", "srf.control.finance.SRF-L2-DEV-001", "srf.control.finance.SRF-L2-DEV-002", "srf.control.finance.SRF-L2-DEV-003", "srf.control.finance.SRF-L2-ECH-001", "srf.control.finance.SRF-L2-MON-001", "srf.control.finance.SRF-L2-MON-002", "srf.control.finance.SRF-L2-VAL-001", "srf.control.finance.SRF-L3-DEV-001", "srf.control.finance.SRF-L3-DEV-002", "srf.control.finance.SRF-L3-ECH-001", "srf.control.finance.SRF-L3-MON-001", "srf.control.finance.SRF-L3-MON-002", "srf.control.finance.SRF-L3-VAL-001", "srf.control.finance.SRF-L4-DEV-001", "srf.control.finance.SRF-L4-DEV-002", "srf.control.finance.SRF-L4-DEV-003", "srf.control.finance.SRF-L4-ECH-001", "srf.control.finance.SRF-L4-MON-001", "srf.control.finance.SRF-L4-MON-002", "srf.control.finance.SRF-L4-MON-003", "srf.control.finance.SRF-L4-VAL-001", "srf.control.finance.SRF-L5-DEV-001", "srf.control.finance.SRF-L5-DEV-002", "srf.control.finance.SRF-L5-DEV-003", "srf.control.finance.SRF-L5-ECH-001", "srf.control.finance.SRF-L5-MON-001", "srf.control.finance.SRF-L5-MON-002", "srf.control.finance.SRF-L5-VAL-001", "srf.control.insurance.SRF-L1-DEV-001", "srf.control.insurance.SRF-L1-DEV-002", "srf.control.insurance.SRF-L1-DEV-004", "srf.control.insurance.SRF-L1-DEV-005", "srf.control.insurance.SRF-L1-MON-001", "srf.control.insurance.SRF-L1-MON-002", "srf.control.insurance.SRF-L1-TPO-002", "srf.control.insurance.SRF-L2-DEV-001", "srf.control.insurance.SRF-L2-DEV-002", "srf.control.insurance.SRF-L2-DEV-003", "srf.control.insurance.SRF-L2-MON-001", "srf.control.insurance.SRF-L2-MON-003", "srf.control.insurance.SRF-L2-VAL-001", "srf.control.insurance.SRF-L3-MON-001", "srf.control.insurance.SRF-L3-MON-002", "srf.control.insurance.SRF-L3-VAL-001", "srf.control.insurance.SRF-L3-VAL-002", "srf.control.insurance.SRF-L3-VAL-003", "srf.control.insurance.SRF-L4-DEV-001", "srf.control.insurance.SRF-L4-DEV-002", "srf.control.insurance.SRF-L4-DEV-003", "srf.control.insurance.SRF-L4-MON-001", "srf.control.insurance.SRF-L4-MON-002", "srf.control.insurance.SRF-L4-MON-003", "srf.control.insurance.SRF-L4-VAL-001", "srf.control.insurance.SRF-L5-DEV-001", "srf.control.insurance.SRF-L5-DEV-002", "srf.control.insurance.SRF-L5-MON-001", "srf.control.insurance.SRF-L5-MON-002", "srf.control.insurance.SRF-L5-VAL-001", "srf.control.insurance.SRF-L5-VAL-002", "srf.control.manufacturing.SRF-L1-CHG-009", "srf.control.manufacturing.SRF-L1-DES-001", "srf.control.manufacturing.SRF-L1-DES-002", "srf.control.manufacturing.SRF-L1-DES-003", "srf.control.manufacturing.SRF-L1-DES-006", "srf.control.manufacturing.SRF-L2-DES-001", "srf.control.manufacturing.SRF-L2-DES-002", "srf.control.manufacturing.SRF-L2-OPS-003", "srf.control.manufacturing.SRF-L2-OPS-004", "srf.control.manufacturing.SRF-L2-OPS-008", "srf.control.manufacturing.SRF-L2-VAL-005", "srf.control.manufacturing.SRF-L3-OPS-008", "srf.control.manufacturing.SRF-L3-OPS-009", "srf.control.manufacturing.SRF-L3-OPS-010", "srf.control.manufacturing.SRF-L4-OPS-007", "srf.control.manufacturing.SRF-L5-CHG-003", "srf.control.manufacturing.SRF-L5-DES-007", "srf.control.manufacturing.SRF-L5-OPS-002", "srf.control.manufacturing.SRF-L5-OPS-004", "srf.control.public-sector.SRF-L1-ACQ-001", "srf.control.public-sector.SRF-L1-ACQ-002", "srf.control.public-sector.SRF-L1-ACQ-003", "srf.control.public-sector.SRF-L1-ACQ-004", "srf.control.public-sector.SRF-L1-ACQ-007", "srf.control.public-sector.SRF-L1-ACQ-008", "srf.control.public-sector.SRF-L1-MON-005", "srf.control.public-sector.SRF-L1-MON-009", "srf.control.public-sector.SRF-L1-OVR-006", "srf.control.public-sector.SRF-L2-ACQ-001", "srf.control.public-sector.SRF-L2-ACQ-002", "srf.control.public-sector.SRF-L2-ACQ-003", "srf.control.public-sector.SRF-L2-ACQ-005", "srf.control.public-sector.SRF-L2-ACQ-008", "srf.control.public-sector.SRF-L2-MON-004", "srf.control.public-sector.SRF-L2-MON-006", "srf.control.public-sector.SRF-L2-MON-007", "srf.control.public-sector.SRF-L3-OVR-004", "srf.control.public-sector.SRF-L3-OVR-005", "srf.control.public-sector.SRF-L3-OVR-008", "srf.control.public-sector.SRF-L3-VAL-001", "srf.control.public-sector.SRF-L3-VAL-002", "srf.control.public-sector.SRF-L3-VAL-003", "srf.control.public-sector.SRF-L4-ACQ-001", "srf.control.public-sector.SRF-L4-ACQ-002", "srf.control.public-sector.SRF-L4-ACQ-003", "srf.control.public-sector.SRF-L4-MON-004", "srf.control.public-sector.SRF-L4-MON-005", "srf.control.public-sector.SRF-L4-MON-006", "srf.control.public-sector.SRF-L4-MON-008", "srf.control.public-sector.SRF-L4-VAL-007", "srf.control.public-sector.SRF-L5-ACQ-001", "srf.control.public-sector.SRF-L5-ACQ-003", "srf.control.public-sector.SRF-L5-ACQ-005", "srf.control.public-sector.SRF-L5-MON-002", "srf.control.public-sector.SRF-L5-MON-004", "srf.control.public-sector.SRF-L5-MON-006", "srf.control.public-sector.SRF-L5-MON-007", "srf.framework.cosai-srf", "srf.layer.L1", "srf.layer.L2", "srf.layer.L3", "srf.layer.L4", "srf.layer.L5" ], "subtype": "operating-model" }, { "id": "srf.opmodel.agent-paas", "label": "Agentic Platform as a Service", "type": "concept", "url": "https://aisharedresponsibility.com/operating-models/#Agent-PaaS", "related": [ "srf.control.finance.SRF-L1-DEV-001", "srf.control.finance.SRF-L1-DEV-002", "srf.control.finance.SRF-L1-DEV-003", "srf.control.finance.SRF-L1-DEV-004", "srf.control.finance.SRF-L1-ECH-001", "srf.control.finance.SRF-L1-MON-001", "srf.control.finance.SRF-L1-MON-002", "srf.control.finance.SRF-L1-MON-003", "srf.control.finance.SRF-L1-VAL-001", "srf.control.finance.SRF-L2-DEV-001", "srf.control.finance.SRF-L2-DEV-002", "srf.control.finance.SRF-L2-DEV-003", "srf.control.finance.SRF-L2-ECH-001", "srf.control.finance.SRF-L2-MON-001", "srf.control.finance.SRF-L2-MON-002", "srf.control.finance.SRF-L2-MON-003", "srf.control.finance.SRF-L2-VAL-001", "srf.control.finance.SRF-L3-DEV-001", "srf.control.finance.SRF-L3-DEV-002", "srf.control.finance.SRF-L3-DEV-003", "srf.control.finance.SRF-L3-ECH-001", "srf.control.finance.SRF-L3-MON-001", "srf.control.finance.SRF-L3-MON-002", "srf.control.finance.SRF-L3-MON-003", "srf.control.finance.SRF-L3-VAL-001", "srf.control.finance.SRF-L4-DEV-001", "srf.control.finance.SRF-L4-DEV-002", "srf.control.finance.SRF-L4-DEV-003", "srf.control.finance.SRF-L4-ECH-001", "srf.control.finance.SRF-L4-MON-001", "srf.control.finance.SRF-L4-MON-002", "srf.control.finance.SRF-L4-MON-003", "srf.control.finance.SRF-L4-VAL-001", "srf.control.finance.SRF-L5-DEV-001", "srf.control.finance.SRF-L5-DEV-002", "srf.control.finance.SRF-L5-DEV-003", "srf.control.finance.SRF-L5-ECH-001", "srf.control.finance.SRF-L5-MON-001", "srf.control.finance.SRF-L5-MON-002", "srf.control.finance.SRF-L5-VAL-001", "srf.framework.cosai-srf", "srf.layer.L1", "srf.layer.L2", "srf.layer.L3", "srf.layer.L4", "srf.layer.L5" ], "subtype": "operating-model" }, { "id": "srf.opmodel.iaas", "label": "Infrastructure as a Service", "type": "concept", "url": "https://aisharedresponsibility.com/operating-models/#IaaS", "related": [ "srf.control.finance.SRF-L1-DEV-001", "srf.control.finance.SRF-L1-DEV-002", "srf.control.finance.SRF-L1-ECH-001", "srf.control.finance.SRF-L1-MON-001", "srf.control.finance.SRF-L1-MON-002", "srf.control.finance.SRF-L1-MON-003", "srf.control.finance.SRF-L1-VAL-001", "srf.control.finance.SRF-L2-DEV-001", "srf.control.finance.SRF-L2-DEV-002", "srf.control.finance.SRF-L2-DEV-003", "srf.control.finance.SRF-L2-ECH-001", "srf.control.finance.SRF-L2-MON-001", "srf.control.finance.SRF-L2-MON-002", "srf.control.finance.SRF-L2-VAL-001", "srf.control.finance.SRF-L3-DEV-001", "srf.control.finance.SRF-L3-DEV-002", "srf.control.finance.SRF-L3-ECH-001", "srf.control.finance.SRF-L3-MON-001", "srf.control.finance.SRF-L3-MON-002", "srf.control.finance.SRF-L3-VAL-001", "srf.control.finance.SRF-L4-DEV-002", "srf.control.finance.SRF-L4-DEV-003", "srf.control.finance.SRF-L4-ECH-001", "srf.control.finance.SRF-L4-MON-002", "srf.control.finance.SRF-L4-MON-003", "srf.control.finance.SRF-L4-VAL-001", "srf.control.finance.SRF-L5-DEV-001", "srf.control.finance.SRF-L5-DEV-002", "srf.control.finance.SRF-L5-DEV-003", "srf.control.finance.SRF-L5-ECH-001", "srf.control.finance.SRF-L5-MON-001", "srf.control.finance.SRF-L5-MON-002", "srf.control.finance.SRF-L5-VAL-001", "srf.framework.cosai-srf", "srf.layer.L1", "srf.layer.L2", "srf.layer.L3", "srf.layer.L4", "srf.layer.L5" ], "subtype": "operating-model" }, { "id": "srf.role.agentic-platform-provider", "label": "Agentic Platform & Framework Providers", "type": "role", "url": "https://aisharedresponsibility.com/personas/#agentic-platform-provider", "related": [ "srf.control.defense.SRF-L3-OPS-006", "srf.control.finance.SRF-L3-DEV-003", "srf.control.finance.SRF-L3-MON-003", "srf.control.manufacturing.SRF-L3-OPS-008", "srf.control.public-sector.SRF-L3-MON-006", "srf.control.public-sector.SRF-L4-ACQ-002", "srf.control.public-sector.SRF-L4-ACQ-003", "srf.layer.L3", "srf.layer.L4" ], "subtype": "persona" }, { "id": "srf.role.application-developer", "label": "Application Developer", "type": "role", "url": "https://aisharedresponsibility.com/personas/#application-developer", "related": [ "srf.control.defense.SRF-L3-ACQ-008", "srf.control.defense.SRF-L3-OPS-007", "srf.control.defense.SRF-L3-OPS-009", "srf.control.defense.SRF-L3-OVR-003", "srf.control.defense.SRF-L3-OVR-004", "srf.control.defense.SRF-L3-OVR-005", "srf.control.defense.SRF-L3-TEVV-001", "srf.control.defense.SRF-L3-TEVV-002", "srf.control.defense.SRF-L3-TEVV-010", "srf.control.defense.SRF-L3-TEVV-011", "srf.control.finance.SRF-L3-DEV-001", "srf.control.finance.SRF-L3-DEV-002", "srf.control.finance.SRF-L3-ECH-001", "srf.control.finance.SRF-L3-MON-001", "srf.control.finance.SRF-L3-MON-002", "srf.control.finance.SRF-L3-VAL-001", "srf.control.insurance.SRF-L3-DEV-001", "srf.control.insurance.SRF-L3-DEV-002", "srf.control.insurance.SRF-L3-MON-001", "srf.control.insurance.SRF-L3-MON-002", "srf.control.insurance.SRF-L3-TPO-001", "srf.control.insurance.SRF-L3-VAL-001", "srf.control.insurance.SRF-L3-VAL-002", "srf.control.insurance.SRF-L3-VAL-003", "srf.control.manufacturing.SRF-L3-OPS-003", "srf.control.manufacturing.SRF-L3-OPS-009", "srf.control.manufacturing.SRF-L3-OPS-010", "srf.control.manufacturing.SRF-L3-VAL-001", "srf.control.manufacturing.SRF-L3-VAL-002", "srf.control.manufacturing.SRF-L3-VAL-004", "srf.control.manufacturing.SRF-L3-VAL-005", "srf.control.manufacturing.SRF-L3-VAL-006", "srf.control.manufacturing.SRF-L3-VAL-007", "srf.control.public-sector.SRF-L2-MON-004", "srf.control.public-sector.SRF-L2-MON-006", "srf.control.public-sector.SRF-L2-MON-007", "srf.control.public-sector.SRF-L3-OVR-004", "srf.control.public-sector.SRF-L3-OVR-005", "srf.control.public-sector.SRF-L3-OVR-008", "srf.control.public-sector.SRF-L3-VAL-001", "srf.control.public-sector.SRF-L3-VAL-002", "srf.control.public-sector.SRF-L3-VAL-003", "srf.control.public-sector.SRF-L3-VAL-007", "srf.layer.L3" ], "subtype": "persona" }, { "id": "srf.role.data-provider", "label": "Data Provider", "type": "role", "url": "https://aisharedresponsibility.com/personas/#data-provider", "related": [ "srf.control.defense.SRF-L2-ACQ-001", "srf.control.defense.SRF-L2-ACQ-003", "srf.control.defense.SRF-L2-ACQ-008", "srf.control.defense.SRF-L2-OPS-002", "srf.control.defense.SRF-L2-OPS-004", "srf.control.defense.SRF-L2-OPS-005", "srf.control.defense.SRF-L2-OPS-006", "srf.control.defense.SRF-L2-OPS-007", "srf.control.defense.SRF-L2-OVR-010", "srf.control.defense.SRF-L2-TEVV-009", "srf.control.finance.SRF-L2-DEV-001", "srf.control.finance.SRF-L2-DEV-002", "srf.control.finance.SRF-L2-DEV-003", "srf.control.finance.SRF-L2-ECH-001", "srf.control.finance.SRF-L2-MON-001", "srf.control.finance.SRF-L2-MON-002", "srf.control.finance.SRF-L2-MON-003", "srf.control.finance.SRF-L2-VAL-001", "srf.control.insurance.SRF-L2-DEV-001", "srf.control.insurance.SRF-L2-DEV-002", "srf.control.insurance.SRF-L2-DEV-003", "srf.control.insurance.SRF-L2-MON-001", "srf.control.insurance.SRF-L2-MON-002", "srf.control.insurance.SRF-L2-MON-003", "srf.control.insurance.SRF-L2-TPO-001", "srf.control.insurance.SRF-L2-VAL-001", "srf.control.manufacturing.SRF-L2-DES-001", "srf.control.manufacturing.SRF-L2-DES-002", "srf.control.manufacturing.SRF-L2-OPS-003", "srf.control.manufacturing.SRF-L2-OPS-004", "srf.control.manufacturing.SRF-L2-OPS-007", "srf.control.manufacturing.SRF-L2-OPS-008", "srf.control.manufacturing.SRF-L2-VAL-005", "srf.control.public-sector.SRF-L2-ACQ-001", "srf.control.public-sector.SRF-L2-ACQ-002", "srf.control.public-sector.SRF-L2-ACQ-003", "srf.control.public-sector.SRF-L2-ACQ-005", "srf.control.public-sector.SRF-L2-ACQ-008", "srf.layer.L2" ], "subtype": "persona" }, { "id": "srf.role.ai-system-users", "label": "AI System Users", "type": "role", "url": "https://aisharedresponsibility.com/personas/#ai-system-users", "related": [ "srf.layer.L1" ], "subtype": "persona" }, { "id": "srf.role.ai-system-governance", "label": "AI System Governance", "type": "role", "url": "https://aisharedresponsibility.com/personas/#ai-system-governance", "related": [ "srf.control.defense.SRF-L1-ACQ-001", "srf.control.defense.SRF-L1-ACQ-002", "srf.control.defense.SRF-L1-ACQ-003", "srf.control.defense.SRF-L1-ACQ-004", "srf.control.defense.SRF-L1-ACQ-005", "srf.control.defense.SRF-L1-ACQ-006", "srf.control.defense.SRF-L1-ACQ-007", "srf.control.defense.SRF-L1-ACQ-009", "srf.control.defense.SRF-L1-OPS-008", "srf.control.defense.SRF-L1-OVR-011", "srf.control.defense.SRF-L1-TEVV-010", "srf.control.finance.SRF-L1-DEV-001", "srf.control.finance.SRF-L1-DEV-002", "srf.control.finance.SRF-L1-DEV-003", "srf.control.finance.SRF-L1-DEV-004", "srf.control.finance.SRF-L1-ECH-001", "srf.control.finance.SRF-L1-MON-001", "srf.control.finance.SRF-L1-MON-002", "srf.control.finance.SRF-L1-MON-003", "srf.control.finance.SRF-L1-VAL-001", "srf.control.insurance.SRF-L1-DEV-001", "srf.control.insurance.SRF-L1-DEV-002", "srf.control.insurance.SRF-L1-DEV-003", "srf.control.insurance.SRF-L1-DEV-004", "srf.control.insurance.SRF-L1-DEV-005", "srf.control.insurance.SRF-L1-MON-001", "srf.control.insurance.SRF-L1-MON-002", "srf.control.insurance.SRF-L1-TPO-001", "srf.control.insurance.SRF-L1-TPO-002", "srf.control.manufacturing.SRF-L1-CHG-009", "srf.control.manufacturing.SRF-L1-CHG-010", "srf.control.manufacturing.SRF-L1-DES-001", "srf.control.manufacturing.SRF-L1-DES-002", "srf.control.manufacturing.SRF-L1-DES-003", "srf.control.manufacturing.SRF-L1-DES-006", "srf.control.manufacturing.SRF-L1-DES-008", "srf.control.manufacturing.SRF-L1-OPS-005", "srf.control.manufacturing.SRF-L1-OPS-007", "srf.control.manufacturing.SRF-L1-VAL-004", "srf.control.public-sector.SRF-L1-ACQ-001", "srf.control.public-sector.SRF-L1-ACQ-002", "srf.control.public-sector.SRF-L1-ACQ-003", "srf.control.public-sector.SRF-L1-ACQ-004", "srf.control.public-sector.SRF-L1-ACQ-007", "srf.control.public-sector.SRF-L1-ACQ-008", "srf.control.public-sector.SRF-L1-MON-005", "srf.control.public-sector.SRF-L1-MON-009", "srf.control.public-sector.SRF-L1-OVR-006", "srf.layer.L1" ], "subtype": "persona" }, { "id": "srf.role.model-provider", "label": "Model Provider", "type": "role", "url": "https://aisharedresponsibility.com/personas/#model-provider", "related": [ "srf.control.defense.SRF-L5-ACQ-001", "srf.control.defense.SRF-L5-ACQ-003", "srf.control.defense.SRF-L5-ACQ-005", "srf.control.defense.SRF-L5-ACQ-007", "srf.control.defense.SRF-L5-ACQ-008", "srf.control.defense.SRF-L5-OPS-002", "srf.control.defense.SRF-L5-OPS-004", "srf.control.defense.SRF-L5-OPS-006", "srf.control.defense.SRF-L5-TEVV-009", "srf.control.finance.SRF-L5-DEV-001", "srf.control.finance.SRF-L5-DEV-002", "srf.control.finance.SRF-L5-DEV-003", "srf.control.finance.SRF-L5-ECH-001", "srf.control.finance.SRF-L5-MON-001", "srf.control.finance.SRF-L5-MON-002", "srf.control.finance.SRF-L5-VAL-001", "srf.control.healthcare.SRF-L5-DEV-001", "srf.control.healthcare.SRF-L5-DEV-002", "srf.control.healthcare.SRF-L5-DEV-003", "srf.control.healthcare.SRF-L5-PMS-001", "srf.control.healthcare.SRF-L5-PMS-002", "srf.control.healthcare.SRF-L5-VV-001", "srf.control.healthcare.SRF-L5-VV-002", "srf.control.insurance.SRF-L5-DEV-001", "srf.control.insurance.SRF-L5-DEV-002", "srf.control.insurance.SRF-L5-MON-001", "srf.control.insurance.SRF-L5-MON-002", "srf.control.insurance.SRF-L5-TPO-001", "srf.control.insurance.SRF-L5-VAL-001", "srf.control.insurance.SRF-L5-VAL-002", "srf.control.manufacturing.SRF-L5-CHG-003", "srf.control.manufacturing.SRF-L5-DES-005", "srf.control.manufacturing.SRF-L5-DES-007", "srf.control.manufacturing.SRF-L5-DES-008", "srf.control.manufacturing.SRF-L5-OPS-002", "srf.control.manufacturing.SRF-L5-OPS-004", "srf.control.manufacturing.SRF-L5-VAL-001", "srf.control.manufacturing.SRF-L5-VAL-006", "srf.control.public-sector.SRF-L5-ACQ-001", "srf.control.public-sector.SRF-L5-ACQ-003", "srf.control.public-sector.SRF-L5-ACQ-005", "srf.control.public-sector.SRF-L5-MON-002", "srf.control.public-sector.SRF-L5-MON-004", "srf.control.public-sector.SRF-L5-MON-006", "srf.control.public-sector.SRF-L5-MON-007", "srf.layer.L5" ], "subtype": "persona" }, { "id": "srf.role.ai-model-serving", "label": "AI Model Serving", "type": "role", "url": "https://aisharedresponsibility.com/personas/#ai-model-serving", "related": [ "srf.layer.L4" ], "subtype": "persona" }, { "id": "srf.role.ai-platform-provider", "label": "AI Platform Provider", "type": "role", "url": "https://aisharedresponsibility.com/personas/#ai-platform-provider", "related": [ "srf.control.defense.SRF-L4-ACQ-001", "srf.control.defense.SRF-L4-ACQ-002", "srf.control.defense.SRF-L4-ACQ-003", "srf.control.defense.SRF-L4-ACQ-007", "srf.control.defense.SRF-L4-ACQ-008", "srf.control.defense.SRF-L4-OPS-004", "srf.control.defense.SRF-L4-OPS-005", "srf.control.defense.SRF-L4-OPS-006", "srf.control.defense.SRF-L4-OPS-009", "srf.control.defense.SRF-L4-OPS-010", "srf.control.defense.SRF-L4-OVR-012", "srf.control.defense.SRF-L4-TEVV-011", "srf.control.finance.SRF-L4-DEV-001", "srf.control.finance.SRF-L4-DEV-002", "srf.control.finance.SRF-L4-DEV-003", "srf.control.finance.SRF-L4-ECH-001", "srf.control.finance.SRF-L4-MON-001", "srf.control.finance.SRF-L4-MON-002", "srf.control.finance.SRF-L4-MON-003", "srf.control.finance.SRF-L4-VAL-001", "srf.control.insurance.SRF-L4-DEV-001", "srf.control.insurance.SRF-L4-DEV-002", "srf.control.insurance.SRF-L4-DEV-003", "srf.control.insurance.SRF-L4-MON-001", "srf.control.insurance.SRF-L4-MON-002", "srf.control.insurance.SRF-L4-MON-003", "srf.control.insurance.SRF-L4-TPO-001", "srf.control.insurance.SRF-L4-VAL-001", "srf.control.manufacturing.SRF-L2-OPS-006", "srf.control.manufacturing.SRF-L4-CHG-004", "srf.control.manufacturing.SRF-L4-DES-001", "srf.control.manufacturing.SRF-L4-DES-002", "srf.control.manufacturing.SRF-L4-DES-008", "srf.control.manufacturing.SRF-L4-OPS-003", "srf.control.manufacturing.SRF-L4-OPS-005", "srf.control.manufacturing.SRF-L4-OPS-006", "srf.control.manufacturing.SRF-L4-OPS-007", "srf.control.manufacturing.SRF-L4-OPS-009", "srf.control.public-sector.SRF-L4-ACQ-001", "srf.control.public-sector.SRF-L4-MON-004", "srf.control.public-sector.SRF-L4-MON-005", "srf.control.public-sector.SRF-L4-MON-006", "srf.control.public-sector.SRF-L4-MON-008", "srf.control.public-sector.SRF-L4-VAL-007", "srf.layer.L4" ], "subtype": "persona" }, { "id": "srf.concept.layer", "label": "Layer", "type": "concept", "url": "https://aisharedresponsibility.com/glossary/#layer", "related": [ "srf.framework.cosai-srf" ], "subtype": "vocabulary" }, { "id": "srf.concept.persona", "label": "Persona", "type": "concept", "url": "https://aisharedresponsibility.com/glossary/#persona", "related": [ "srf.framework.cosai-srf" ], "subtype": "vocabulary" }, { "id": "srf.concept.operating-model", "label": "Operating Model", "type": "concept", "url": "https://aisharedresponsibility.com/glossary/#operating-model", "related": [ "srf.framework.cosai-srf" ], "subtype": "vocabulary" }, { "id": "srf.concept.accountability", "label": "Accountability", "type": "concept", "url": "https://aisharedresponsibility.com/glossary/#accountability", "related": [ "srf.framework.cosai-srf" ], "subtype": "vocabulary" }, { "id": "srf.concept.accountable-party", "label": "Accountable Party", "type": "concept", "url": "https://aisharedresponsibility.com/glossary/#accountable-party", "related": [ "srf.framework.cosai-srf" ], "subtype": "vocabulary" }, { "id": "srf.concept.responsibility-cascade", "label": "Responsibility Cascade", "type": "concept", "url": "https://aisharedresponsibility.com/glossary/#responsibility-cascade", "related": [ "srf.framework.cosai-srf" ], "subtype": "vocabulary" }, { "id": "srf.concept.shared-responsibility", "label": "Shared Responsibility", "type": "concept", "url": "https://aisharedresponsibility.com/glossary/#shared-responsibility", "related": [ "srf.framework.cosai-srf" ], "subtype": "vocabulary" }, { "id": "srf.concept.raci", "label": "RACI", "type": "concept", "url": "https://aisharedresponsibility.com/glossary/#raci", "related": [ "srf.framework.cosai-srf" ], "subtype": "vocabulary" }, { "id": "srf.concept.autonomy-level", "label": "Autonomy Level", "type": "concept", "url": "https://aisharedresponsibility.com/glossary/#autonomy-level", "related": [ "srf.framework.cosai-srf" ], "subtype": "vocabulary" }, { "id": "srf.concept.human-override-tier", "label": "Human Override Tier", "type": "concept", "url": "https://aisharedresponsibility.com/glossary/#human-override-tier", "related": [ "srf.framework.cosai-srf" ], "subtype": "vocabulary" }, { "id": "srf.concept.agentic-system", "label": "Agentic System", "type": "concept", "url": "https://aisharedresponsibility.com/glossary/#agentic-system", "related": [ "srf.framework.cosai-srf" ], "subtype": "vocabulary" }, { "id": "srf.concept.control", "label": "Control", "type": "concept", "url": "https://aisharedresponsibility.com/glossary/#control", "related": [ "srf.framework.cosai-srf" ], "subtype": "vocabulary" }, { "id": "srf.concept.evidence-threshold", "label": "Evidence Threshold", "type": "concept", "url": "https://aisharedresponsibility.com/glossary/#evidence-threshold", "related": [ "srf.framework.cosai-srf" ], "subtype": "vocabulary" }, { "id": "srf.concept.ocsf", "label": "OCSF", "type": "concept", "url": "https://aisharedresponsibility.com/glossary/#ocsf", "related": [ "srf.framework.cosai-srf" ], "subtype": "vocabulary" }, { "id": "srf.concept.control-schema", "label": "Control Schema", "type": "concept", "url": "https://aisharedresponsibility.com/glossary/#control-schema", "related": [ "srf.framework.cosai-srf" ], "subtype": "vocabulary" }, { "id": "ext.framework.nist-ai-rmf", "label": "NIST AI Risk Management Framework", "type": "framework", "url": "https://www.nist.gov/itl/ai-risk-management-framework", "related": [ "srf.layer.L1", "srf.layer.L2", "srf.layer.L3", "srf.layer.L4", "srf.layer.L5" ] }, { "id": "ext.framework.eu-ai-act", "label": "EU Artificial Intelligence Act", "type": "framework", "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689", "related": [ "srf.layer.L1", "srf.layer.L2", "srf.layer.L3", "srf.layer.L5" ] }, { "id": "ext.framework.iso-42001", "label": "ISO/IEC 42001 — AI Management Systems", "type": "framework", "url": "https://www.iso.org/standard/81230.html", "related": [ "srf.layer.L1", "srf.layer.L2", "srf.layer.L3", "srf.layer.L4", "srf.layer.L5" ] }, { "id": "ext.framework.iso-22989", "label": "ISO/IEC 22989 — AI Concepts and Terminology", "type": "framework", "url": "https://www.iso.org/standard/74296.html", "related": [ "srf.layer.L1", "srf.layer.L2", "srf.layer.L3", "srf.layer.L4", "srf.layer.L5" ] }, { "id": "ext.framework.nist-ai-600-1", "label": "NIST AI 100-1 — AI Risk Management", "type": "framework", "url": "https://doi.org/10.6028/NIST.AI.100-1", "related": [ "srf.layer.L1", "srf.layer.L2", "srf.layer.L3", "srf.layer.L4", "srf.layer.L5" ] }, { "id": "ext.framework.nistir-8605a", "label": "COSAiS — SP 800-53 Control Overlays for Securing AI Systems", "type": "framework", "url": "https://csrc.nist.gov/projects/cosais", "related": [ "srf.layer.L1", "srf.layer.L2", "srf.layer.L3", "srf.layer.L4", "srf.layer.L5" ] }, { "id": "ext.framework.nist-csf-2", "label": "NIST Cybersecurity Framework 2.0", "type": "framework", "url": "https://www.nist.gov/cyberframework", "related": [ "srf.layer.L1", "srf.layer.L2", "srf.layer.L3", "srf.layer.L4" ] }, { "id": "ext.framework.owasp-llm-top10", "label": "OWASP LLM Top 10", "type": "framework", "url": "https://owasp.org/www-project-top-10-for-large-language-model-applications/", "related": [ "srf.layer.L3", "srf.layer.L4", "srf.layer.L5" ] }, { "id": "ext.framework.csa-aicm", "label": "CSA AI Controls Matrix", "type": "framework", "url": "https://cloudsecurityalliance.org/artifacts/ai-controls-matrix", "related": [ "srf.layer.L1", "srf.layer.L2", "srf.layer.L3", "srf.layer.L4", "srf.layer.L5" ] }, { "id": "ext.framework.mitre-atlas", "label": "MITRE ATLAS", "type": "framework", "url": "https://atlas.mitre.org/", "related": [ "srf.layer.L3", "srf.layer.L4", "srf.layer.L5" ] }, { "id": "ext.framework.sr-26-2", "label": "SR 26-2 — Revised Guidance on Model Risk Management", "type": "framework", "url": "https://www.federalreserve.gov/supervisionreg/srletters/SR2602.pdf", "related": [ "srf.layer.L1", "srf.layer.L2", "srf.layer.L5" ] }, { "id": "ext.framework.fda-ai-ml", "label": "FDA AI/ML-Based Software as a Medical Device", "type": "framework", "url": "https://www.fda.gov/medical-devices/software-medical-device-samd/artificial-intelligence-and-machine-learning-aiml-enabled-medical-devices", "related": [ "srf.layer.L1", "srf.layer.L3", "srf.layer.L5" ] }, { "id": "ext.framework.gdpr", "label": "General Data Protection Regulation", "type": "framework", "url": "https://gdpr-info.eu/", "related": [ "srf.layer.L1", "srf.layer.L2" ] }, { "id": "srf.control.finance.SRF-L1-DEV-001", "label": "SRF-L1-DEV-001: AI Risk Appetite Statement with Named Accountable Executive", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L1-DEV-001", "related": [ "srf.layer.L1", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas", "srf.role.ai-system-governance" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L1-DEV-002", "label": "SRF-L1-DEV-002: AI Model Inventory and Tier Classification Policy", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L1-DEV-002", "related": [ "srf.layer.L1", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas", "srf.role.ai-system-governance" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L1-DEV-003", "label": "SRF-L1-DEV-003: Acceptable Use Policy with Named Business-Unit Accountable Individual", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L1-DEV-003", "related": [ "srf.layer.L1", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L1-DEV-004", "label": "SRF-L1-DEV-004: Agent Business Process Authorization Policy", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L1-DEV-004", "related": [ "srf.layer.L1", "srf.opmodel.agent-paas", "srf.role.ai-system-governance" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L1-VAL-001", "label": "SRF-L1-VAL-001: Independent Review of AI Risk Appetite by Second Line", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L1-VAL-001", "related": [ "srf.layer.L1", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas", "srf.role.ai-system-governance" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L1-MON-001", "label": "SRF-L1-MON-001: Model Tier Classification Coverage Rate", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L1-MON-001", "related": [ "srf.layer.L1", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas", "srf.role.ai-system-governance" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L1-MON-002", "label": "SRF-L1-MON-002: AI Governance Committee Review Cadence", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L1-MON-002", "related": [ "srf.layer.L1", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas", "srf.role.ai-system-governance" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L1-MON-003", "label": "SRF-L1-MON-003: Governance Role Identity Lifecycle Monitoring", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L1-MON-003", "related": [ "srf.layer.L1", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas", "srf.role.ai-system-governance" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L1-ECH-001", "label": "SRF-L1-ECH-001: Board-Level Effective Challenge of AI Risk Profile", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L1-ECH-001", "related": [ "srf.layer.L1", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas", "srf.role.ai-system-governance" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L2-DEV-001", "label": "SRF-L2-DEV-001: Training and RAG Data Provenance Documentation", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L2-DEV-001", "related": [ "srf.layer.L2", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.iaas", "srf.role.data-provider" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L2-DEV-002", "label": "SRF-L2-DEV-002: Data Classification for AI-Accessible Data Stores", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L2-DEV-002", "related": [ "srf.layer.L2", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas", "srf.role.data-provider" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L2-DEV-003", "label": "SRF-L2-DEV-003: Training Data Quality Baseline and PSI Reference Distribution", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L2-DEV-003", "related": [ "srf.layer.L2", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.iaas", "srf.role.data-provider" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L2-VAL-001", "label": "SRF-L2-VAL-001: Independent Validation of Training Data Quality and Representativeness", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L2-VAL-001", "related": [ "srf.layer.L2", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.iaas", "srf.role.data-provider" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L2-MON-001", "label": "SRF-L2-MON-001: Training and RAG Data Drift Monitoring (PSI)", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L2-MON-001", "related": [ "srf.layer.L2", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.iaas", "srf.role.data-provider" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L2-MON-002", "label": "SRF-L2-MON-002: Data Classification Coverage Rate for AI-Accessible Stores", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L2-MON-002", "related": [ "srf.layer.L2", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas", "srf.role.data-provider" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L2-MON-003", "label": "SRF-L2-MON-003: Agent Runtime Memory Store Integrity Monitoring", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L2-MON-003", "related": [ "srf.layer.L2", "srf.opmodel.agent-paas", "srf.role.data-provider" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L2-ECH-001", "label": "SRF-L2-ECH-001: Effective Challenge of Data Quality Standards and Drift Thresholds", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L2-ECH-001", "related": [ "srf.layer.L2", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.iaas", "srf.role.data-provider" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L3-DEV-001", "label": "SRF-L3-DEV-001: Input Validation and Prompt Injection Defense Design", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L3-DEV-001", "related": [ "srf.layer.L3", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas", "srf.role.application-developer" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L3-DEV-002", "label": "SRF-L3-DEV-002: Output Filtering and Content Safety Design", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L3-DEV-002", "related": [ "srf.layer.L3", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas", "srf.role.application-developer" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L3-DEV-003", "label": "SRF-L3-DEV-003: Tool-Execution Authorization Design for Agentic Systems", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L3-DEV-003", "related": [ "srf.layer.L3", "srf.opmodel.agent-paas", "srf.role.agentic-platform-provider" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L3-VAL-001", "label": "SRF-L3-VAL-001: Independent Validation of Application-Level Security Controls", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L3-VAL-001", "related": [ "srf.layer.L3", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas", "srf.role.application-developer" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L3-MON-001", "label": "SRF-L3-MON-001: Prompt Injection Detection Rate Monitoring", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L3-MON-001", "related": [ "srf.layer.L3", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas", "srf.role.application-developer" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L3-MON-002", "label": "SRF-L3-MON-002: Output Filter Block-Rate Monitoring", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L3-MON-002", "related": [ "srf.layer.L3", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas", "srf.role.application-developer" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L3-MON-003", "label": "SRF-L3-MON-003: Tool-Execution Authorization Failure Rate Monitoring", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L3-MON-003", "related": [ "srf.layer.L3", "srf.opmodel.agent-paas", "srf.role.agentic-platform-provider" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L3-ECH-001", "label": "SRF-L3-ECH-001: Effective Challenge of Application Security Control Thresholds", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L3-ECH-001", "related": [ "srf.layer.L3", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas", "srf.role.application-developer" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L4-DEV-001", "label": "SRF-L4-DEV-001: Platform-Level Guardrail Design and Configuration Baseline", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L4-DEV-001", "related": [ "srf.layer.L4", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L4-DEV-002", "label": "SRF-L4-DEV-002: LLM Gateway Authentication and Authorization Design", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L4-DEV-002", "related": [ "srf.layer.L4", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas", "srf.role.ai-platform-provider" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L4-DEV-003", "label": "SRF-L4-DEV-003: Confidential Compute Configuration for Tier-1 Models", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L4-DEV-003", "related": [ "srf.layer.L4", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.iaas", "srf.role.ai-platform-provider" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L4-VAL-001", "label": "SRF-L4-VAL-001: Independent Validation of Platform Security Controls", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L4-VAL-001", "related": [ "srf.layer.L4", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas", "srf.role.ai-platform-provider" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L4-MON-001", "label": "SRF-L4-MON-001: Guardrail Bypass Rate Monitoring", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L4-MON-001", "related": [ "srf.layer.L4", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L4-MON-002", "label": "SRF-L4-MON-002: Gateway Authentication Failure Rate Monitoring", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L4-MON-002", "related": [ "srf.layer.L4", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas", "srf.role.ai-platform-provider" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L4-MON-003", "label": "SRF-L4-MON-003: Confidential Compute Attestation Validity Monitoring", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L4-MON-003", "related": [ "srf.layer.L4", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.iaas", "srf.role.ai-platform-provider" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L4-ECH-001", "label": "SRF-L4-ECH-001: Effective Challenge of Platform Security Controls and Thresholds", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L4-ECH-001", "related": [ "srf.layer.L4", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.opmodel.iaas", "srf.role.ai-platform-provider" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L5-DEV-001", "label": "SRF-L5-DEV-001: Model Card Completeness and Security Disclosure", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L5-DEV-001", "related": [ "srf.layer.L5", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.iaas", "srf.role.model-provider" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L5-DEV-002", "label": "SRF-L5-DEV-002: Model Artifact Signing and Supply-Chain Provenance", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L5-DEV-002", "related": [ "srf.layer.L5", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.iaas", "srf.role.model-provider" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L5-DEV-003", "label": "SRF-L5-DEV-003: Pre-Release Security Evaluation Baseline", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L5-DEV-003", "related": [ "srf.layer.L5", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.iaas", "srf.role.model-provider" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L5-VAL-001", "label": "SRF-L5-VAL-001: Independent Evaluation of Model Security Properties", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L5-VAL-001", "related": [ "srf.layer.L5", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.iaas", "srf.role.model-provider" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L5-MON-001", "label": "SRF-L5-MON-001: Model Signature Verification at Load", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L5-MON-001", "related": [ "srf.layer.L5", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.iaas", "srf.role.model-provider" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L5-MON-002", "label": "SRF-L5-MON-002: Vulnerability Disclosure SLA Adherence", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L5-MON-002", "related": [ "srf.layer.L5", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.iaas", "srf.role.model-provider" ], "subtype": "finance" }, { "id": "srf.control.finance.SRF-L5-ECH-001", "label": "SRF-L5-ECH-001: Effective Challenge of Model Governance Standards", "type": "control", "url": "https://aisharedresponsibility.com/finance/controls/#SRF-L5-ECH-001", "related": [ "srf.layer.L5", "srf.opmodel.agent-paas", "srf.opmodel.ai-paas", "srf.opmodel.iaas", "srf.role.model-provider" ], "subtype": "finance" }, { "id": "srf.control.healthcare.SRF-L1-DEV-001", "label": "SRF-L1-DEV-001: Clinical AI Risk Classification Policy", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L1-DEV-001", "related": [ "srf.layer.L1", "srf.role.clinical-ai-governance" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.role.clinical-ai-governance", "label": "Clinical Ai Governance", "type": "role", "url": "https://aisharedresponsibility.com/healthcare/controls/", "related": [ "srf.control.healthcare.SRF-L1-DEV-001", "srf.control.healthcare.SRF-L1-DEV-002", "srf.control.healthcare.SRF-L1-DEV-003", "srf.control.healthcare.SRF-L1-HOR-001", "srf.control.healthcare.SRF-L1-HOR-002", "srf.control.healthcare.SRF-L1-HOR-003", "srf.control.healthcare.SRF-L1-PMS-001", "srf.control.healthcare.SRF-L1-PMS-002", "srf.control.healthcare.SRF-L1-PMS-003" ], "subtype": "persona", "sector_specialization": true, "vertical": "healthcare" }, { "id": "srf.control.healthcare.SRF-L1-DEV-002", "label": "SRF-L1-DEV-002: Clinical AI System Inventory and Registry", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L1-DEV-002", "related": [ "srf.layer.L1", "srf.role.clinical-ai-governance" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L1-DEV-003", "label": "SRF-L1-DEV-003: Clinical AI Ethics Committee and Oversight Charter", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L1-DEV-003", "related": [ "srf.layer.L1", "srf.role.clinical-ai-governance" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L1-HOR-001", "label": "SRF-L1-HOR-001: Clinical AI Governance Review Cadence", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L1-HOR-001", "related": [ "srf.layer.L1", "srf.role.clinical-ai-governance" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L1-HOR-002", "label": "SRF-L1-HOR-002: Acceptable Use Policy for Clinical AI", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L1-HOR-002", "related": [ "srf.layer.L1", "srf.role.clinical-ai-governance" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L1-HOR-003", "label": "SRF-L1-HOR-003: Clinician Override Documentation Policy", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L1-HOR-003", "related": [ "srf.layer.L1", "srf.role.clinical-ai-governance" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L1-PMS-001", "label": "SRF-L1-PMS-001: FDA Regulatory Filing Currency", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L1-PMS-001", "related": [ "srf.layer.L1", "srf.role.clinical-ai-governance" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L1-PMS-002", "label": "SRF-L1-PMS-002: Medical Device Adverse Event Reporting Readiness", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L1-PMS-002", "related": [ "srf.layer.L1", "srf.role.clinical-ai-governance" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L1-PMS-003", "label": "SRF-L1-PMS-003: PCCP Algorithm Change Governance", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L1-PMS-003", "related": [ "srf.layer.L1", "srf.role.clinical-ai-governance" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L2-DEV-001", "label": "SRF-L2-DEV-001: Training Data Provenance and Consent Documentation", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L2-DEV-001", "related": [ "srf.layer.L2", "srf.role.clinical-data-steward" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.role.clinical-data-steward", "label": "Clinical Data Steward", "type": "role", "url": "https://aisharedresponsibility.com/healthcare/controls/", "related": [ "srf.control.healthcare.SRF-L2-DEV-001", "srf.control.healthcare.SRF-L2-DEV-002", "srf.control.healthcare.SRF-L2-DEV-003", "srf.control.healthcare.SRF-L2-PMS-001", "srf.control.healthcare.SRF-L2-PMS-002", "srf.control.healthcare.SRF-L2-PMS-003", "srf.control.healthcare.SRF-L2-VV-001", "srf.control.healthcare.SRF-L2-VV-002" ], "subtype": "persona", "sector_specialization": true, "vertical": "healthcare" }, { "id": "srf.control.healthcare.SRF-L2-DEV-002", "label": "SRF-L2-DEV-002: Demographic Representation Assessment", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L2-DEV-002", "related": [ "srf.layer.L2", "srf.role.clinical-data-steward" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L2-DEV-003", "label": "SRF-L2-DEV-003: PHI Isolation in Non-Production Environments", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L2-DEV-003", "related": [ "srf.layer.L2", "srf.role.clinical-data-steward" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L2-VV-001", "label": "SRF-L2-VV-001: External Validation Dataset Independence", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L2-VV-001", "related": [ "srf.layer.L2", "srf.role.clinical-data-steward" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L2-VV-002", "label": "SRF-L2-VV-002: Subgroup Performance Equivalence", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L2-VV-002", "related": [ "srf.layer.L2", "srf.role.clinical-data-steward" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L2-PMS-001", "label": "SRF-L2-PMS-001: Input Distribution Drift Monitoring", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L2-PMS-001", "related": [ "srf.layer.L2", "srf.role.clinical-data-steward" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L2-PMS-002", "label": "SRF-L2-PMS-002: Real-World Data Quality Scoring", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L2-PMS-002", "related": [ "srf.layer.L2", "srf.role.clinical-data-steward" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L2-PMS-003", "label": "SRF-L2-PMS-003: Agent Context Store Integrity", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L2-PMS-003", "related": [ "srf.layer.L2", "srf.role.clinical-data-steward" ], "subtype": "healthcare", "deployment_models": [ "Agent-Clinical" ] }, { "id": "srf.control.healthcare.SRF-L3-DEV-001", "label": "SRF-L3-DEV-001: Human-in-the-Loop Gate for High-Stakes Outputs", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L3-DEV-001", "related": [ "srf.layer.L3", "srf.role.clinical-application-developer" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.role.clinical-application-developer", "label": "Clinical Application Developer", "type": "role", "url": "https://aisharedresponsibility.com/healthcare/controls/", "related": [ "srf.control.healthcare.SRF-L3-DEV-001", "srf.control.healthcare.SRF-L3-DEV-002", "srf.control.healthcare.SRF-L3-DEV-003", "srf.control.healthcare.SRF-L3-PMS-001", "srf.control.healthcare.SRF-L3-PMS-002", "srf.control.healthcare.SRF-L3-PMS-003", "srf.control.healthcare.SRF-L3-VV-001", "srf.control.healthcare.SRF-L3-VV-002" ], "subtype": "persona", "sector_specialization": true, "vertical": "healthcare" }, { "id": "srf.control.healthcare.SRF-L3-DEV-002", "label": "SRF-L3-DEV-002: AI Explanation Coverage for Clinical Decisions", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L3-DEV-002", "related": [ "srf.layer.L3", "srf.role.clinical-application-developer" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical" ] }, { "id": "srf.control.healthcare.SRF-L3-DEV-003", "label": "SRF-L3-DEV-003: Adversarial Robustness Testing Before Clinical Deployment", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L3-DEV-003", "related": [ "srf.layer.L3", "srf.role.clinical-application-developer" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical" ] }, { "id": "srf.control.healthcare.SRF-L3-VV-001", "label": "SRF-L3-VV-001: Clinical Workflow Usability Validation", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L3-VV-001", "related": [ "srf.layer.L3", "srf.role.clinical-application-developer" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L3-VV-002", "label": "SRF-L3-VV-002: Prompt Injection and Input Manipulation Defense", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L3-VV-002", "related": [ "srf.layer.L3", "srf.role.clinical-application-developer" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical" ] }, { "id": "srf.control.healthcare.SRF-L3-PMS-001", "label": "SRF-L3-PMS-001: Clinician Override Rate Monitoring", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L3-PMS-001", "related": [ "srf.layer.L3", "srf.role.clinical-application-developer" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L3-PMS-002", "label": "SRF-L3-PMS-002: Safety-Critical Output Filter Bypass Rate", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L3-PMS-002", "related": [ "srf.layer.L3", "srf.role.clinical-application-developer" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical" ] }, { "id": "srf.control.healthcare.SRF-L3-PMS-003", "label": "SRF-L3-PMS-003: Agentic Task Boundary Enforcement", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L3-PMS-003", "related": [ "srf.layer.L3", "srf.role.clinical-application-developer" ], "subtype": "healthcare", "deployment_models": [ "Agent-Clinical" ] }, { "id": "srf.control.healthcare.SRF-L4-DEV-001", "label": "SRF-L4-DEV-001: SMART on FHIR Authentication and Scoped Authorization", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L4-DEV-001", "related": [ "srf.layer.L4", "srf.role.health-platform-provider" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical" ] }, { "id": "srf.role.health-platform-provider", "label": "Health Platform Provider", "type": "role", "url": "https://aisharedresponsibility.com/healthcare/controls/", "related": [ "srf.control.healthcare.SRF-L4-DEV-001", "srf.control.healthcare.SRF-L4-DEV-002", "srf.control.healthcare.SRF-L4-DEV-003", "srf.control.healthcare.SRF-L4-PMS-001", "srf.control.healthcare.SRF-L4-PMS-002", "srf.control.healthcare.SRF-L4-PMS-003", "srf.control.healthcare.SRF-L4-VV-001", "srf.control.healthcare.SRF-L4-VV-002" ], "subtype": "persona", "sector_specialization": true, "vertical": "healthcare" }, { "id": "srf.control.healthcare.SRF-L4-DEV-002", "label": "SRF-L4-DEV-002: FHIR AuditEvent Logging Completeness", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L4-DEV-002", "related": [ "srf.layer.L4", "srf.role.health-platform-provider" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L4-DEV-003", "label": "SRF-L4-DEV-003: PHI Encryption at Rest and in Transit", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L4-DEV-003", "related": [ "srf.layer.L4", "srf.role.health-platform-provider" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L4-VV-001", "label": "SRF-L4-VV-001: Platform Security Assessment Before Clinical Deployment", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L4-VV-001", "related": [ "srf.layer.L4", "srf.role.health-platform-provider" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L4-VV-002", "label": "SRF-L4-VV-002: Clinical Guardrail Configuration Baseline Verification", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L4-VV-002", "related": [ "srf.layer.L4", "srf.role.health-platform-provider" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L4-PMS-001", "label": "SRF-L4-PMS-001: Unauthorized Access Attempt Monitoring", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L4-PMS-001", "related": [ "srf.layer.L4", "srf.role.health-platform-provider" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L4-PMS-002", "label": "SRF-L4-PMS-002: Clinical AI Platform Availability SLA", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L4-PMS-002", "related": [ "srf.layer.L4", "srf.role.health-platform-provider" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical" ] }, { "id": "srf.control.healthcare.SRF-L4-PMS-003", "label": "SRF-L4-PMS-003: Runtime Model Artifact Integrity Verification", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L4-PMS-003", "related": [ "srf.layer.L4", "srf.role.health-platform-provider" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L5-DEV-001", "label": "SRF-L5-DEV-001: Model Card and SaMD Definition Statement", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L5-DEV-001", "related": [ "srf.layer.L5", "srf.role.model-provider" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L5-DEV-002", "label": "SRF-L5-DEV-002: Software of Unknown Provenance (SOUP) Documentation", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L5-DEV-002", "related": [ "srf.layer.L5", "srf.role.model-provider" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L5-DEV-003", "label": "SRF-L5-DEV-003: Pre-Deployment Safety Evaluation (ISO 14971)", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L5-DEV-003", "related": [ "srf.layer.L5", "srf.role.model-provider" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L5-VV-001", "label": "SRF-L5-VV-001: Independent Clinical Validation", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L5-VV-001", "related": [ "srf.layer.L5", "srf.role.model-provider" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L5-VV-002", "label": "SRF-L5-VV-002: Model Artifact Signing and Supply-Chain Provenance", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L5-VV-002", "related": [ "srf.layer.L5", "srf.role.model-provider" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L5-PMS-001", "label": "SRF-L5-PMS-001: Post-Market Performance Monitoring Plan", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L5-PMS-001", "related": [ "srf.layer.L5", "srf.role.model-provider" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.healthcare.SRF-L5-PMS-002", "label": "SRF-L5-PMS-002: Vulnerability Disclosure and Patch Response SLA", "type": "control", "url": "https://aisharedresponsibility.com/healthcare/controls/#SRF-L5-PMS-002", "related": [ "srf.layer.L5", "srf.role.model-provider" ], "subtype": "healthcare", "deployment_models": [ "SaMD-Cloud", "EHR-Embedded", "Agent-Clinical", "On-Premise" ] }, { "id": "srf.control.insurance.SRF-L1-DEV-001", "label": "SRF-L1-DEV-001: AIS Program Document Currency and Board Approval", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L1-DEV-001", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops", "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L1-DEV-002", "label": "SRF-L1-DEV-002: AI System Inventory Coverage", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L1-DEV-002", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops", "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L1-DEV-003", "label": "SRF-L1-DEV-003: Third-Party AI Vendor Register with Named Accountable Officer", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L1-DEV-003", "related": [ "srf.layer.L1", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops", "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L1-DEV-004", "label": "SRF-L1-DEV-004: Adverse-Decision Appeal Process Documentation", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L1-DEV-004", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops", "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L1-DEV-005", "label": "SRF-L1-DEV-005: Governance Framework Availability Readiness for CO Regulation 10-1-1", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L1-DEV-005", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops", "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L1-MON-001", "label": "SRF-L1-MON-001: AI Risk Appetite Statement Review Cadence", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L1-MON-001", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops", "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L1-MON-002", "label": "SRF-L1-MON-002: Senior Management Accountability Designation for AI Governance", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L1-MON-002", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops", "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L1-TPO-001", "label": "SRF-L1-TPO-001: Third-Party AIS Program Alignment Review", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L1-TPO-001", "related": [ "srf.layer.L1", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops", "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L1-TPO-002", "label": "SRF-L1-TPO-002: Market Conduct Exam Readiness Documentation Package", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L1-TPO-002", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops", "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L2-DEV-001", "label": "SRF-L2-DEV-001: ECDIS Source Documentation and Permissible-Purpose Verification", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L2-DEV-001", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.data-provider" ], "subtype": "insurance", "deployment_models": [ "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L2-DEV-002", "label": "SRF-L2-DEV-002: Protected-Class Proxy Variable Screening", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L2-DEV-002", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.data-provider" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops", "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L2-DEV-003", "label": "SRF-L2-DEV-003: Training Data Representativeness by Line of Business", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L2-DEV-003", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.role.data-provider" ], "subtype": "insurance", "deployment_models": [ "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L2-VAL-001", "label": "SRF-L2-VAL-001: External Data Source Permissible Use Audit", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L2-VAL-001", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.data-provider" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops", "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L2-MON-001", "label": "SRF-L2-MON-001: Input Drift Monitoring via Population Stability Index", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L2-MON-001", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.role.data-provider" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops", "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L2-MON-002", "label": "SRF-L2-MON-002: Consumer Data Minimization in Agent Context Stores", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L2-MON-002", "related": [ "srf.layer.L2", "srf.role.data-provider" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops" ] }, { "id": "srf.control.insurance.SRF-L2-MON-003", "label": "SRF-L2-MON-003: Algorithmic Model Input Completeness Monitoring", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L2-MON-003", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.role.data-provider" ], "subtype": "insurance", "deployment_models": [ "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L2-TPO-001", "label": "SRF-L2-TPO-001: Vendor Data Lineage Documentation", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L2-TPO-001", "related": [ "srf.layer.L2", "srf.opmodel.ai-saas", "srf.role.data-provider" ], "subtype": "insurance", "deployment_models": [ "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L3-DEV-001", "label": "SRF-L3-DEV-001: Prompt Injection Defense for Consumer-Facing AI", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L3-DEV-001", "related": [ "srf.layer.L3", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops" ] }, { "id": "srf.control.insurance.SRF-L3-DEV-002", "label": "SRF-L3-DEV-002: Agentic Task Boundary Enforcement for Claims Automation", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L3-DEV-002", "related": [ "srf.layer.L3", "srf.role.application-developer" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops" ] }, { "id": "srf.control.insurance.SRF-L3-VAL-001", "label": "SRF-L3-VAL-001: Adverse-Action Explanation Coverage with Reason Codes", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L3-VAL-001", "related": [ "srf.layer.L3", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops", "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L3-VAL-002", "label": "SRF-L3-VAL-002: Human Review Gate for Adverse Underwriting and Claims Decisions", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L3-VAL-002", "related": [ "srf.layer.L3", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops", "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L3-VAL-003", "label": "SRF-L3-VAL-003: Explainability Validation for Rate and Underwriting Models", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L3-VAL-003", "related": [ "srf.layer.L3", "srf.opmodel.ai-paas", "srf.role.application-developer" ], "subtype": "insurance", "deployment_models": [ "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L3-MON-001", "label": "SRF-L3-MON-001: Unfair-Discrimination Outcome Testing Cadence", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L3-MON-001", "related": [ "srf.layer.L3", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops", "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L3-MON-002", "label": "SRF-L3-MON-002: Consumer Complaint Monitoring for AI-Driven Decisions", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L3-MON-002", "related": [ "srf.layer.L3", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops", "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L3-TPO-001", "label": "SRF-L3-TPO-001: Vendor Application Interface Security Testing", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L3-TPO-001", "related": [ "srf.layer.L3", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "insurance", "deployment_models": [ "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L4-DEV-001", "label": "SRF-L4-DEV-001: Model Gateway Authentication Configuration", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L4-DEV-001", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.role.ai-platform-provider" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops" ] }, { "id": "srf.control.insurance.SRF-L4-DEV-002", "label": "SRF-L4-DEV-002: Guardrail Configuration Baseline Documentation", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L4-DEV-002", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops" ] }, { "id": "srf.control.insurance.SRF-L4-DEV-003", "label": "SRF-L4-DEV-003: PII Encryption at Rest and in Transit", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L4-DEV-003", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops", "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L4-VAL-001", "label": "SRF-L4-VAL-001: Platform Security Assessment", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L4-VAL-001", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops", "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L4-MON-001", "label": "SRF-L4-MON-001: Vendor-Model Isolation and Egress Control", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L4-MON-001", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.role.ai-platform-provider" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops", "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L4-MON-002", "label": "SRF-L4-MON-002: Audit Log Completeness for AI-Assisted Decisions", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L4-MON-002", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops", "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L4-MON-003", "label": "SRF-L4-MON-003: Runtime Anomaly Detection for AI Workloads", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L4-MON-003", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.role.ai-platform-provider" ], "subtype": "insurance", "deployment_models": [ "Agent-Ops" ] }, { "id": "srf.control.insurance.SRF-L4-TPO-001", "label": "SRF-L4-TPO-001: Third-Party Platform Access Review", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L4-TPO-001", "related": [ "srf.layer.L4", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "insurance", "deployment_models": [ "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L5-DEV-001", "label": "SRF-L5-DEV-001: Model Card with Intended Line-of-Business Statement", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L5-DEV-001", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.role.model-provider" ], "subtype": "insurance", "deployment_models": [ "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L5-DEV-002", "label": "SRF-L5-DEV-002: Model Artifact Signing and Supply-Chain Provenance", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L5-DEV-002", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.role.model-provider" ], "subtype": "insurance", "deployment_models": [ "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L5-VAL-001", "label": "SRF-L5-VAL-001: Pre-Deployment Fairness Evaluation by Line of Business", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L5-VAL-001", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.role.model-provider" ], "subtype": "insurance", "deployment_models": [ "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L5-VAL-002", "label": "SRF-L5-VAL-002: Independent Model Validation", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L5-VAL-002", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.role.model-provider" ], "subtype": "insurance", "deployment_models": [ "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L5-MON-001", "label": "SRF-L5-MON-001: Post-Deployment Performance and Drift Disclosure SLA from Vendors", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L5-MON-001", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.role.model-provider" ], "subtype": "insurance", "deployment_models": [ "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L5-MON-002", "label": "SRF-L5-MON-002: CVE Vulnerability Disclosure SLA from Model Provider", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L5-MON-002", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.role.model-provider" ], "subtype": "insurance", "deployment_models": [ "Vendor-Model" ] }, { "id": "srf.control.insurance.SRF-L5-TPO-001", "label": "SRF-L5-TPO-001: Vendor Model Due-Diligence Evidence Package (NAIC Third-Party Oversight)", "type": "control", "url": "https://aisharedresponsibility.com/insurance/controls/#SRF-L5-TPO-001", "related": [ "srf.layer.L5", "srf.opmodel.ai-saas", "srf.role.model-provider" ], "subtype": "insurance", "deployment_models": [ "Vendor-Model" ] }, { "id": "srf.control.public-sector.SRF-L1-ACQ-001", "label": "SRF-L1-ACQ-001: AI Use-Case Inventory Completeness and Public Posting", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L1-ACQ-001", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops", "Shared-Service" ] }, { "id": "srf.control.public-sector.SRF-L1-ACQ-002", "label": "SRF-L1-ACQ-002: High-Impact AI Designation with Named Designating Official", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L1-ACQ-002", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops", "Shared-Service" ] }, { "id": "srf.control.public-sector.SRF-L1-ACQ-003", "label": "SRF-L1-ACQ-003: CAIO Appointment and AI Governance Board Charter Currency", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L1-ACQ-003", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops", "Shared-Service" ] }, { "id": "srf.control.public-sector.SRF-L1-ACQ-004", "label": "SRF-L1-ACQ-004: M-25-21 Compliance Plan Currency", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L1-ACQ-004", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops", "Shared-Service" ] }, { "id": "srf.control.public-sector.SRF-L1-MON-005", "label": "SRF-L1-MON-005: Discontinuation and Waiver Process Readiness", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L1-MON-005", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops", "Shared-Service" ] }, { "id": "srf.control.public-sector.SRF-L1-OVR-006", "label": "SRF-L1-OVR-006: Public Feedback Channel for High-Impact AI", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L1-OVR-006", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops", "Shared-Service" ] }, { "id": "srf.control.public-sector.SRF-L1-ACQ-007", "label": "SRF-L1-ACQ-007: AI Acquisition Contract Compliance with M-25-22", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L1-ACQ-007", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "public-sector", "deployment_models": [ "Shared-Service" ] }, { "id": "srf.control.public-sector.SRF-L1-ACQ-008", "label": "SRF-L1-ACQ-008: AI Staff Training and Assessment Coverage", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L1-ACQ-008", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops", "Shared-Service" ] }, { "id": "srf.control.public-sector.SRF-L1-MON-009", "label": "SRF-L1-MON-009: AI Governance Board Review Cadence for High-Impact Use Cases", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L1-MON-009", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops", "Shared-Service" ] }, { "id": "srf.control.public-sector.SRF-L2-ACQ-001", "label": "SRF-L2-ACQ-001: Authority-to-Use Verification for Training and RAG Data", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L2-ACQ-001", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.data-provider" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops", "Shared-Service" ] }, { "id": "srf.control.public-sector.SRF-L2-ACQ-002", "label": "SRF-L2-ACQ-002: Agency Data Egress Block to Commercial Model Training", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L2-ACQ-002", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.data-provider" ], "subtype": "public-sector" }, { "id": "srf.control.public-sector.SRF-L2-ACQ-003", "label": "SRF-L2-ACQ-003: PII and CUI Classification Coverage for AI-Accessible Data Stores", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L2-ACQ-003", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.data-provider" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops", "Shared-Service" ] }, { "id": "srf.control.public-sector.SRF-L2-MON-004", "label": "SRF-L2-MON-004: Input Distribution Shift Monitoring (PSI)", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L2-MON-004", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops" ] }, { "id": "srf.control.public-sector.SRF-L2-ACQ-005", "label": "SRF-L2-ACQ-005: AI Interaction Log Retention Compliance (NARA)", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L2-ACQ-005", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.data-provider" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops", "Shared-Service" ] }, { "id": "srf.control.public-sector.SRF-L2-MON-006", "label": "SRF-L2-MON-006: AI Output Accuracy Monitoring Against Human Baseline", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L2-MON-006", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops" ] }, { "id": "srf.control.public-sector.SRF-L2-MON-007", "label": "SRF-L2-MON-007: Bias and Disparate Impact Monitoring for Citizen-Facing Use Cases", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L2-MON-007", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops" ] }, { "id": "srf.control.public-sector.SRF-L2-ACQ-008", "label": "SRF-L2-ACQ-008: FedRAMP Authorization Status Verification for AI Data Services", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L2-ACQ-008", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.data-provider" ], "subtype": "public-sector", "deployment_models": [ "Shared-Service" ] }, { "id": "srf.control.public-sector.SRF-L3-VAL-001", "label": "SRF-L3-VAL-001: Pre-Deployment Testing Coverage for High-Impact Use Cases", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L3-VAL-001", "related": [ "srf.layer.L3", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops" ] }, { "id": "srf.control.public-sector.SRF-L3-VAL-002", "label": "SRF-L3-VAL-002: AI Impact Assessment Completion for High-Impact Use Cases", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L3-VAL-002", "related": [ "srf.layer.L3", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops", "Shared-Service" ] }, { "id": "srf.control.public-sector.SRF-L3-VAL-003", "label": "SRF-L3-VAL-003: Prompt Injection Detection for Citizen-Facing AI Systems", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L3-VAL-003", "related": [ "srf.layer.L3", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops" ] }, { "id": "srf.control.public-sector.SRF-L3-OVR-004", "label": "SRF-L3-OVR-004: Human Oversight Gate for Adverse Citizen-Facing Decisions", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L3-OVR-004", "related": [ "srf.layer.L3", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops" ] }, { "id": "srf.control.public-sector.SRF-L3-OVR-005", "label": "SRF-L3-OVR-005: Remedy and Appeal Mechanism Coverage", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L3-OVR-005", "related": [ "srf.layer.L3", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops", "Shared-Service" ] }, { "id": "srf.control.public-sector.SRF-L3-MON-006", "label": "SRF-L3-MON-006: Agentic Task Boundary Enforcement for Casework Automation", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L3-MON-006", "related": [ "srf.layer.L3", "srf.role.agentic-platform-provider" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops" ] }, { "id": "srf.control.public-sector.SRF-L3-VAL-007", "label": "SRF-L3-VAL-007: Shared-Service AI Inheritance Chain Documentation", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L3-VAL-007", "related": [ "srf.layer.L3", "srf.role.application-developer" ], "subtype": "public-sector", "deployment_models": [ "Shared-Service" ] }, { "id": "srf.control.public-sector.SRF-L3-OVR-008", "label": "SRF-L3-OVR-008: AI Output Explanation for Adverse Citizen Decisions", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L3-OVR-008", "related": [ "srf.layer.L3", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops" ] }, { "id": "srf.control.public-sector.SRF-L4-ACQ-001", "label": "SRF-L4-ACQ-001: AI Service FedRAMP Authorization at Required Impact Level", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L4-ACQ-001", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "public-sector", "deployment_models": [ "Shared-Service" ] }, { "id": "srf.control.public-sector.SRF-L4-ACQ-002", "label": "SRF-L4-ACQ-002: Guardrail Configuration Baseline and Change Control", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L4-ACQ-002", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.agentic-platform-provider" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops" ] }, { "id": "srf.control.public-sector.SRF-L4-ACQ-003", "label": "SRF-L4-ACQ-003: Gateway Authentication and Authorization for AI API Access", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L4-ACQ-003", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.agentic-platform-provider" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops" ] }, { "id": "srf.control.public-sector.SRF-L4-MON-004", "label": "SRF-L4-MON-004: CUI Encryption and Access Monitoring for AI Workloads", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L4-MON-004", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops", "Shared-Service" ] }, { "id": "srf.control.public-sector.SRF-L4-MON-005", "label": "SRF-L4-MON-005: Audit Log Completeness Aligned to FedRAMP 20x KSI Evidence", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L4-MON-005", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops", "Shared-Service" ] }, { "id": "srf.control.public-sector.SRF-L4-MON-006", "label": "SRF-L4-MON-006: Model Serving Availability SLA for Mission-Critical Use Cases", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L4-MON-006", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "public-sector" }, { "id": "srf.control.public-sector.SRF-L4-VAL-007", "label": "SRF-L4-VAL-007: Security Control Inheritance Verification at ATO Boundary", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L4-VAL-007", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "public-sector", "deployment_models": [ "Shared-Service" ] }, { "id": "srf.control.public-sector.SRF-L4-MON-008", "label": "SRF-L4-MON-008: Continuous Vulnerability Scanning for AI Platform Components", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L4-MON-008", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops" ] }, { "id": "srf.control.public-sector.SRF-L5-ACQ-001", "label": "SRF-L5-ACQ-001: Model Documentation Completeness per M-25-22 Transparency Terms", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L5-ACQ-001", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.model-provider" ], "subtype": "public-sector" }, { "id": "srf.control.public-sector.SRF-L5-MON-002", "label": "SRF-L5-MON-002: Vendor Performance and Drift Disclosure SLA", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L5-MON-002", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.model-provider" ], "subtype": "public-sector" }, { "id": "srf.control.public-sector.SRF-L5-ACQ-003", "label": "SRF-L5-ACQ-003: Model Artifact Signing and Provenance Verification", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L5-ACQ-003", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.role.model-provider" ], "subtype": "public-sector", "deployment_models": [ "Agent-Ops" ] }, { "id": "srf.control.public-sector.SRF-L5-MON-004", "label": "SRF-L5-MON-004: Vendor Vulnerability Disclosure SLA", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L5-MON-004", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.model-provider" ], "subtype": "public-sector" }, { "id": "srf.control.public-sector.SRF-L5-ACQ-005", "label": "SRF-L5-ACQ-005: Model Portability Evidence for Vendor Lock-In Avoidance", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L5-ACQ-005", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.model-provider" ], "subtype": "public-sector" }, { "id": "srf.control.public-sector.SRF-L5-MON-006", "label": "SRF-L5-MON-006: AI Model Version Change Notification and Re-Validation Trigger", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L5-MON-006", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.model-provider" ], "subtype": "public-sector" }, { "id": "srf.control.public-sector.SRF-L5-MON-007", "label": "SRF-L5-MON-007: Third-Party AI Supply Chain Risk Assessment", "type": "control", "url": "https://aisharedresponsibility.com/public-sector/controls/#SRF-L5-MON-007", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.model-provider" ], "subtype": "public-sector", "deployment_models": [ "Shared-Service" ] }, { "id": "srf.control.defense.SRF-L1-ACQ-001", "label": "SRF-L1-ACQ-001: AI Use Case Registry and CDAO Reporting", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L1-ACQ-001", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L1-ACQ-002", "label": "SRF-L1-ACQ-002: Responsible AI Officer Designation", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L1-ACQ-002", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L1-ACQ-003", "label": "SRF-L1-ACQ-003: AI Governance Board with CDAO Oversight Link", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L1-ACQ-003", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L1-ACQ-004", "label": "SRF-L1-ACQ-004: DoD RAI Compliance Plan (Five-Principle Assessment)", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L1-ACQ-004", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L1-ACQ-005", "label": "SRF-L1-ACQ-005: AI Acquisition Requirements per DoDI 5000.90", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L1-ACQ-005", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "defense", "deployment_models": [ "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L1-ACQ-006", "label": "SRF-L1-ACQ-006: AI Supply Chain Risk Assessment", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L1-ACQ-006", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L1-ACQ-007", "label": "SRF-L1-ACQ-007: Operator and Commander AI Training Program", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L1-ACQ-007", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L1-OPS-008", "label": "SRF-L1-OPS-008: AI Incident Reporting to CDAO", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L1-OPS-008", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L1-ACQ-009", "label": "SRF-L1-ACQ-009: NSS Boundary Classification Determination", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L1-ACQ-009", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L1-TEVV-010", "label": "SRF-L1-TEVV-010: TEVV Plan Existence and Approval Before Operational Deployment", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L1-TEVV-010", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L2-ACQ-001", "label": "SRF-L2-ACQ-001: CUI Classification and Marking on AI Inputs and Outputs", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L2-ACQ-001", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.data-provider" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L2-OPS-002", "label": "SRF-L2-OPS-002: IL-Level Data Boundary Enforcement and Tenant Isolation", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L2-OPS-002", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.data-provider" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L2-ACQ-003", "label": "SRF-L2-ACQ-003: Training Data Authority-to-Use Documentation", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L2-ACQ-003", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.data-provider" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L2-OPS-004", "label": "SRF-L2-OPS-004: Data Egress Controls per Classification Level", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L2-OPS-004", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.data-provider" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L2-OPS-005", "label": "SRF-L2-OPS-005: Adversarial Input Detection (Prompt Injection and Data Poisoning)", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L2-OPS-005", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.data-provider" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L2-OPS-006", "label": "SRF-L2-OPS-006: Bias and Disparate Impact Monitoring on Consequential Decisions", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L2-OPS-006", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.data-provider" ], "subtype": "defense", "deployment_models": [ "Agent-Ops" ] }, { "id": "srf.control.defense.SRF-L2-OPS-007", "label": "SRF-L2-OPS-007: AI Decision Log Retention per NARA Requirements", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L2-OPS-007", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.data-provider" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L2-ACQ-008", "label": "SRF-L2-ACQ-008: Contractor Data Isolation from DoD Data Planes", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L2-ACQ-008", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.data-provider" ], "subtype": "defense", "deployment_models": [ "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L3-TEVV-001", "label": "SRF-L3-TEVV-001: TEVV Plan Execution per DoDI 5000.89", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L3-TEVV-001", "related": [ "srf.layer.L3", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L3-TEVV-002", "label": "SRF-L3-TEVV-002: AI Impact Assessment Before Operational Deployment", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L3-TEVV-002", "related": [ "srf.layer.L3", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L3-OVR-003", "label": "SRF-L3-OVR-003: Human Oversight Gate for Use-of-Force-Adjacent Decisions", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L3-OVR-003", "related": [ "srf.layer.L3", "srf.role.application-developer" ], "subtype": "defense", "deployment_models": [ "Program-Embedded", "Agent-Ops" ] }, { "id": "srf.control.defense.SRF-L3-OVR-004", "label": "SRF-L3-OVR-004: Operator Interface Override Capability", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L3-OVR-004", "related": [ "srf.layer.L3", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L3-OVR-005", "label": "SRF-L3-OVR-005: Remedy and Appeal Mechanism for Adverse Administrative Decisions", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L3-OVR-005", "related": [ "srf.layer.L3", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "defense", "deployment_models": [ "Agent-Ops" ] }, { "id": "srf.control.defense.SRF-L3-OPS-006", "label": "SRF-L3-OPS-006: Agentic Task Boundary Enforcement", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L3-OPS-006", "related": [ "srf.layer.L3", "srf.role.agentic-platform-provider" ], "subtype": "defense", "deployment_models": [ "Agent-Ops" ] }, { "id": "srf.control.defense.SRF-L3-OPS-007", "label": "SRF-L3-OPS-007: Prompt Injection Detection at Application Layer", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L3-OPS-007", "related": [ "srf.layer.L3", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "defense", "deployment_models": [ "Agent-Ops" ] }, { "id": "srf.control.defense.SRF-L3-ACQ-008", "label": "SRF-L3-ACQ-008: Shared Service Inheritance Chain Documentation", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L3-ACQ-008", "related": [ "srf.layer.L3", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "defense" }, { "id": "srf.control.defense.SRF-L3-OPS-009", "label": "SRF-L3-OPS-009: Plain-Language Output Explanation for Operators", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L3-OPS-009", "related": [ "srf.layer.L3", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L4-ACQ-001", "label": "SRF-L4-ACQ-001: DISA Provisional Authorization at Required IL Before Deployment", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L4-ACQ-001", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "defense" }, { "id": "srf.control.defense.SRF-L4-ACQ-002", "label": "SRF-L4-ACQ-002: STIG Baseline Configuration Enforcement", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L4-ACQ-002", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "defense", "deployment_models": [ "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L4-ACQ-003", "label": "SRF-L4-ACQ-003: IL-Appropriate Cloud Region Enforcement", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L4-ACQ-003", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "defense" }, { "id": "srf.control.defense.SRF-L4-OPS-004", "label": "SRF-L4-OPS-004: CUI and Classified Data Encryption to NSA-Approved Standards", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L4-OPS-004", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "defense", "deployment_models": [ "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L4-OPS-005", "label": "SRF-L4-OPS-005: Audit Log Completeness per DISA Requirements", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L4-OPS-005", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "defense", "deployment_models": [ "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L4-OPS-006", "label": "SRF-L4-OPS-006: API Gateway Authentication and Authorization", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L4-OPS-006", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "defense", "deployment_models": [ "Agent-Ops" ] }, { "id": "srf.control.defense.SRF-L4-ACQ-007", "label": "SRF-L4-ACQ-007: CMMC Level 2 Assessment for Contractor-Owned CUI Platforms", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L4-ACQ-007", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "defense", "deployment_models": [ "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L4-ACQ-008", "label": "SRF-L4-ACQ-008: CMMC Level 3 Assessment for Higher-Value Contractor Platforms", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L4-ACQ-008", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.role.ai-platform-provider" ], "subtype": "defense", "deployment_models": [ "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L4-OPS-009", "label": "SRF-L4-OPS-009: Continuous Vulnerability Scanning via DISA ACAS", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L4-OPS-009", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "defense", "deployment_models": [ "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L4-OPS-010", "label": "SRF-L4-OPS-010: Mission-Critical AI Availability SLA", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L4-OPS-010", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L5-ACQ-001", "label": "SRF-L5-ACQ-001: Model Transparency Card per DoDI 5000.90", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L5-ACQ-001", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.model-provider" ], "subtype": "defense", "deployment_models": [ "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L5-OPS-002", "label": "SRF-L5-OPS-002: Vendor Model Drift Disclosure SLA", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L5-OPS-002", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.model-provider" ], "subtype": "defense" }, { "id": "srf.control.defense.SRF-L5-ACQ-003", "label": "SRF-L5-ACQ-003: Model Artifact Signing and Bill of AI Materials", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L5-ACQ-003", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.role.model-provider" ], "subtype": "defense", "deployment_models": [ "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L5-OPS-004", "label": "SRF-L5-OPS-004: Vulnerability Disclosure SLA and Patch Cadence", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L5-OPS-004", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.model-provider" ], "subtype": "defense", "deployment_models": [ "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L5-ACQ-005", "label": "SRF-L5-ACQ-005: Model Portability to Avoid Vendor Lock-In", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L5-ACQ-005", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.model-provider" ], "subtype": "defense" }, { "id": "srf.control.defense.SRF-L5-OPS-006", "label": "SRF-L5-OPS-006: Re-Validation Trigger on Model Version Change", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L5-OPS-006", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.model-provider" ], "subtype": "defense", "deployment_models": [ "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L5-ACQ-007", "label": "SRF-L5-ACQ-007: Personnel Security Clearance for IL6 Model Infrastructure Access", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L5-ACQ-007", "related": [ "srf.layer.L5", "srf.role.model-provider" ], "subtype": "defense", "deployment_models": [ "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L5-ACQ-008", "label": "SRF-L5-ACQ-008: Supply Chain Risk Assessment for AI Components and Foundation Model Providers", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L5-ACQ-008", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.model-provider" ], "subtype": "defense", "deployment_models": [ "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L1-OVR-011", "label": "SRF-L1-OVR-011: Human Oversight Escalation Chain Documented and Rehearsed", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L1-OVR-011", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L2-TEVV-009", "label": "SRF-L2-TEVV-009: Training and RAG Data Integrity Verification Before Deployment", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L2-TEVV-009", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.data-provider" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L2-OVR-010", "label": "SRF-L2-OVR-010: AI Decision Log Human Review Cadence for High-Stakes Operations", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L2-OVR-010", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.role.data-provider" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L3-TEVV-010", "label": "SRF-L3-TEVV-010: Red Team and Adversarial Robustness Test Before Deployment", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L3-TEVV-010", "related": [ "srf.layer.L3", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L3-TEVV-011", "label": "SRF-L3-TEVV-011: Bias and Equitable Treatment Assessment Before Deployment", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L3-TEVV-011", "related": [ "srf.layer.L3", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L4-TEVV-011", "label": "SRF-L4-TEVV-011: Platform Security Configuration Validated Against CC SRG Baseline Before ATO", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L4-TEVV-011", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L4-OVR-012", "label": "SRF-L4-OVR-012: Platform-Level Emergency Stop Capability Tested", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L4-OVR-012", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.role.ai-platform-provider" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.defense.SRF-L5-TEVV-009", "label": "SRF-L5-TEVV-009: Model Behavioral Baseline Documented Before Initial Deployment", "type": "control", "url": "https://aisharedresponsibility.com/defense/controls/#SRF-L5-TEVV-009", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.model-provider" ], "subtype": "defense", "deployment_models": [ "Agent-Ops", "Program-Embedded" ] }, { "id": "srf.control.manufacturing.SRF-L1-DES-001", "label": "SRF-L1-DES-001: EU AI Act Risk Classification and Registry", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L1-DES-001", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge", "Product-Embedded" ] }, { "id": "srf.control.manufacturing.SRF-L1-DES-002", "label": "SRF-L1-DES-002: AI Governance Committee with OT and Safety Representation", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L1-DES-002", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge", "Product-Embedded" ] }, { "id": "srf.control.manufacturing.SRF-L1-DES-003", "label": "SRF-L1-DES-003: AI Use Case Inventory with Operating Model and Risk Tier", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L1-DES-003", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge", "Product-Embedded" ] }, { "id": "srf.control.manufacturing.SRF-L1-VAL-004", "label": "SRF-L1-VAL-004: Conformity Assessment Program Management", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L1-VAL-004", "related": [ "srf.layer.L1", "srf.role.ai-system-governance" ], "subtype": "manufacturing", "deployment_models": [ "Product-Embedded", "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L1-OPS-005", "label": "SRF-L1-OPS-005: Incident Reporting Plan to Market Surveillance Authority", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L1-OPS-005", "related": [ "srf.layer.L1", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "manufacturing", "deployment_models": [ "Product-Embedded", "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L1-DES-006", "label": "SRF-L1-DES-006: Third-Party AI System Procurement Policy", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L1-DES-006", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge", "Product-Embedded" ] }, { "id": "srf.control.manufacturing.SRF-L1-OPS-007", "label": "SRF-L1-OPS-007: Post-Market Monitoring Plan per EU AI Act Article 72", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L1-OPS-007", "related": [ "srf.layer.L1", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "manufacturing", "deployment_models": [ "Product-Embedded", "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L1-DES-008", "label": "SRF-L1-DES-008: Fundamental Rights Impact Assessment (FRIA)", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L1-DES-008", "related": [ "srf.layer.L1", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "manufacturing", "deployment_models": [ "Product-Embedded" ] }, { "id": "srf.control.manufacturing.SRF-L1-CHG-009", "label": "SRF-L1-CHG-009: AI Discontinuation and Decommission Procedure", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L1-CHG-009", "related": [ "srf.layer.L1", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-system-governance" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge", "Product-Embedded" ] }, { "id": "srf.control.manufacturing.SRF-L1-CHG-010", "label": "SRF-L1-CHG-010: OT Change Management Policy for AI Systems", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L1-CHG-010", "related": [ "srf.layer.L1", "srf.role.ai-system-governance" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L2-DES-001", "label": "SRF-L2-DES-001: Sensor and Historian Data Provenance Documentation", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L2-DES-001", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.role.data-provider" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L2-DES-002", "label": "SRF-L2-DES-002: Training Data Authority-to-Use for Production Data", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L2-DES-002", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.data-provider" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L2-OPS-003", "label": "SRF-L2-OPS-003: OT/IT Data Boundary Enforcement", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L2-OPS-003", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.role.data-provider" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L2-OPS-004", "label": "SRF-L2-OPS-004: Input Data Drift Monitoring", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L2-OPS-004", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.data-provider" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L2-VAL-005", "label": "SRF-L2-VAL-005: Training Data Bias Assessment for Consequential AI", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L2-VAL-005", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.data-provider" ], "subtype": "manufacturing" }, { "id": "srf.control.manufacturing.SRF-L2-OPS-006", "label": "SRF-L2-OPS-006: Adversarial Input Detection for OT-Edge AI", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L2-OPS-006", "related": [ "srf.layer.L2", "srf.role.ai-platform-provider" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L2-OPS-007", "label": "SRF-L2-OPS-007: AI Decision Log Retention per EU AI Act Article 12", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L2-OPS-007", "related": [ "srf.layer.L2", "srf.opmodel.ai-saas", "srf.role.data-provider" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge", "Product-Embedded" ] }, { "id": "srf.control.manufacturing.SRF-L2-OPS-008", "label": "SRF-L2-OPS-008: Production Data Egress Audit for Cloud AI Services", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L2-OPS-008", "related": [ "srf.layer.L2", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.data-provider" ], "subtype": "manufacturing" }, { "id": "srf.control.manufacturing.SRF-L3-VAL-001", "label": "SRF-L3-VAL-001: EU AI Act Technical Documentation Completeness", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L3-VAL-001", "related": [ "srf.layer.L3", "srf.role.application-developer" ], "subtype": "manufacturing", "deployment_models": [ "Product-Embedded", "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L3-VAL-002", "label": "SRF-L3-VAL-002: Pre-Deployment Testing for Safety-Critical AI", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L3-VAL-002", "related": [ "srf.layer.L3", "srf.role.application-developer" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge", "Product-Embedded" ] }, { "id": "srf.control.manufacturing.SRF-L3-OPS-003", "label": "SRF-L3-OPS-003: Human Oversight Gate for Safety-Critical AI Outputs", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L3-OPS-003", "related": [ "srf.layer.L3", "srf.role.application-developer" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge", "Product-Embedded" ] }, { "id": "srf.control.manufacturing.SRF-L3-VAL-004", "label": "SRF-L3-VAL-004: Safety Interlock Integration Verification", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L3-VAL-004", "related": [ "srf.layer.L3", "srf.role.application-developer" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L3-VAL-005", "label": "SRF-L3-VAL-005: EU AI Act Conformity Assessment Completed Before Market Placement", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L3-VAL-005", "related": [ "srf.layer.L3", "srf.role.application-developer" ], "subtype": "manufacturing", "deployment_models": [ "Product-Embedded", "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L3-VAL-006", "label": "SRF-L3-VAL-006: FAT/SAT Test Coverage for AI-Enabled Machinery", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L3-VAL-006", "related": [ "srf.layer.L3", "srf.role.application-developer" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge", "Product-Embedded" ] }, { "id": "srf.control.manufacturing.SRF-L3-VAL-007", "label": "SRF-L3-VAL-007: Operator Override Interface Verification", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L3-VAL-007", "related": [ "srf.layer.L3", "srf.role.application-developer" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge", "Product-Embedded" ] }, { "id": "srf.control.manufacturing.SRF-L3-OPS-008", "label": "SRF-L3-OPS-008: Agentic Task Boundary Enforcement for Autonomous Systems", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L3-OPS-008", "related": [ "srf.layer.L3", "srf.opmodel.ai-paas", "srf.role.agentic-platform-provider" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L3-OPS-009", "label": "SRF-L3-OPS-009: Prompt Injection and Adversarial Input Detection for AI Assistants", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L3-OPS-009", "related": [ "srf.layer.L3", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "manufacturing" }, { "id": "srf.control.manufacturing.SRF-L3-OPS-010", "label": "SRF-L3-OPS-010: Explanation Availability for AI-Assisted Quality and Safety Decisions", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L3-OPS-010", "related": [ "srf.layer.L3", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.application-developer" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L4-DES-001", "label": "SRF-L4-DES-001: OT Network Zone Segmentation per IEC 62443", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L4-DES-001", "related": [ "srf.layer.L4", "srf.role.ai-platform-provider" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L4-DES-002", "label": "SRF-L4-DES-002: OT-Edge AI Hardware Security Baseline", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L4-DES-002", "related": [ "srf.layer.L4", "srf.role.ai-platform-provider" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L4-OPS-003", "label": "SRF-L4-OPS-003: Air-Gap or Approved-Conduit Enforcement for Safety-Critical OT AI", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L4-OPS-003", "related": [ "srf.layer.L4", "srf.role.ai-platform-provider" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L4-CHG-004", "label": "SRF-L4-CHG-004: Patch and Update Change Management for OT AI", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L4-CHG-004", "related": [ "srf.layer.L4", "srf.role.ai-platform-provider" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L4-OPS-005", "label": "SRF-L4-OPS-005: OT SIEM and Anomaly Detection Coverage", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L4-OPS-005", "related": [ "srf.layer.L4", "srf.role.ai-platform-provider" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L4-OPS-006", "label": "SRF-L4-OPS-006: Remote Access Security for OT AI Maintenance", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L4-OPS-006", "related": [ "srf.layer.L4", "srf.role.ai-platform-provider" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L4-OPS-007", "label": "SRF-L4-OPS-007: Encrypted Communication for AI Data in Transit", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L4-OPS-007", "related": [ "srf.layer.L4", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L4-DES-008", "label": "SRF-L4-DES-008: AI Software Bill of Materials (SBOM/AIBOM) for OT AI Components", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L4-DES-008", "related": [ "srf.layer.L4", "srf.role.ai-platform-provider" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge", "Product-Embedded" ] }, { "id": "srf.control.manufacturing.SRF-L4-OPS-009", "label": "SRF-L4-OPS-009: Availability SLA for AI in Critical Production Processes", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L4-OPS-009", "related": [ "srf.layer.L4", "srf.opmodel.ai-saas", "srf.role.ai-platform-provider" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L5-VAL-001", "label": "SRF-L5-VAL-001: EU AI Act Technical File Completeness - Model Supplier Obligations", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L5-VAL-001", "related": [ "srf.layer.L5", "srf.role.model-provider" ], "subtype": "manufacturing", "deployment_models": [ "Product-Embedded", "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L5-OPS-002", "label": "SRF-L5-OPS-002: Model Drift and Performance Degradation Monitoring", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L5-OPS-002", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.model-provider" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L5-CHG-003", "label": "SRF-L5-CHG-003: Model Version Change Management Trigger", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L5-CHG-003", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.model-provider" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge", "Product-Embedded" ] }, { "id": "srf.control.manufacturing.SRF-L5-OPS-004", "label": "SRF-L5-OPS-004: Vulnerability Disclosure SLA for AI Model Supplier", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L5-OPS-004", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.model-provider" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge", "Product-Embedded" ] }, { "id": "srf.control.manufacturing.SRF-L5-DES-005", "label": "SRF-L5-DES-005: BoAIM and Model Artifact Signing", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L5-DES-005", "related": [ "srf.layer.L5", "srf.role.model-provider" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge", "Product-Embedded" ] }, { "id": "srf.control.manufacturing.SRF-L5-VAL-006", "label": "SRF-L5-VAL-006: Functional Safety Validation for AI in Safety-Instrumented Systems", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L5-VAL-006", "related": [ "srf.layer.L5", "srf.role.model-provider" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L5-DES-007", "label": "SRF-L5-DES-007: Model Portability and Lock-In Avoidance Documentation", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L5-DES-007", "related": [ "srf.layer.L5", "srf.opmodel.ai-paas", "srf.opmodel.ai-saas", "srf.role.model-provider" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge" ] }, { "id": "srf.control.manufacturing.SRF-L5-DES-008", "label": "SRF-L5-DES-008: Model Supplier Due Diligence and Supply Chain Risk Assessment", "type": "control", "url": "https://aisharedresponsibility.com/manufacturing/controls/#SRF-L5-DES-008", "related": [ "srf.layer.L5", "srf.role.model-provider" ], "subtype": "manufacturing", "deployment_models": [ "OT-Edge", "Product-Embedded" ] } ], "edges": [ { "source": "srf.framework.cosai-srf", "rel": "contains_layer", "target": "srf.layer.L1" }, { "source": "srf.framework.cosai-srf", "rel": "contains_layer", "target": "srf.layer.L2" }, { "source": "srf.framework.cosai-srf", "rel": "contains_layer", "target": "srf.layer.L3" }, { "source": "srf.framework.cosai-srf", "rel": "contains_layer", "target": "srf.layer.L4" }, { "source": "srf.framework.cosai-srf", "rel": "contains_layer", "target": "srf.layer.L5" }, { "source": "srf.framework.cosai-srf", "rel": "has_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.framework.cosai-srf", "rel": "has_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.framework.cosai-srf", "rel": "has_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.framework.cosai-srf", "rel": "has_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.role.agentic-platform-provider", "rel": "operates_at_layer", "target": "srf.layer.L3" }, { "source": "srf.role.agentic-platform-provider", "rel": "operates_at_layer", "target": "srf.layer.L4" }, { "source": "srf.role.application-developer", "rel": "operates_at_layer", "target": "srf.layer.L3" }, { "source": "srf.role.data-provider", "rel": "operates_at_layer", "target": "srf.layer.L2" }, { "source": "srf.role.ai-system-users", "rel": "operates_at_layer", "target": "srf.layer.L1" }, { "source": "srf.role.ai-system-governance", "rel": "operates_at_layer", "target": "srf.layer.L1" }, { "source": "srf.role.model-provider", "rel": "operates_at_layer", "target": "srf.layer.L5" }, { "source": "srf.role.ai-model-serving", "rel": "operates_at_layer", "target": "srf.layer.L4" }, { "source": "srf.role.ai-platform-provider", "rel": "operates_at_layer", "target": "srf.layer.L4" }, { "source": "srf.layer.L1", "rel": "has_persona", "target": "srf.role.ai-system-users" }, { "source": "srf.layer.L1", "rel": "has_persona", "target": "srf.role.ai-system-governance" }, { "source": "srf.layer.L2", "rel": "has_persona", "target": "srf.role.data-provider" }, { "source": "srf.layer.L3", "rel": "has_persona", "target": "srf.role.application-developer" }, { "source": "srf.layer.L3", "rel": "has_persona", "target": "srf.role.agentic-platform-provider" }, { "source": "srf.layer.L4", "rel": "has_persona", "target": "srf.role.ai-platform-provider" }, { "source": "srf.layer.L4", "rel": "has_persona", "target": "srf.role.ai-model-serving" }, { "source": "srf.layer.L5", "rel": "has_persona", "target": "srf.role.model-provider" }, { "source": "srf.opmodel.ai-saas", "rel": "assigns_responsibility", "target": "srf.layer.L1", "value": "shared" }, { "source": "srf.opmodel.ai-paas", "rel": "assigns_responsibility", "target": "srf.layer.L1", "value": "customer-owned" }, { "source": "srf.opmodel.agent-paas", "rel": "assigns_responsibility", "target": "srf.layer.L1", "value": "customer-owned" }, { "source": "srf.opmodel.iaas", "rel": "assigns_responsibility", "target": "srf.layer.L1", "value": "customer-owned" }, { "source": "srf.opmodel.ai-saas", "rel": "assigns_responsibility", "target": "srf.layer.L2", "value": "shared" }, { "source": "srf.opmodel.ai-paas", "rel": "assigns_responsibility", "target": "srf.layer.L2", "value": "shared" }, { "source": "srf.opmodel.agent-paas", "rel": "assigns_responsibility", "target": "srf.layer.L2", "value": "shared" }, { "source": "srf.opmodel.iaas", "rel": "assigns_responsibility", "target": "srf.layer.L2", "value": "customer-owned" }, { "source": "srf.opmodel.ai-saas", "rel": "assigns_responsibility", "target": "srf.layer.L3", "value": "shared" }, { "source": "srf.opmodel.ai-paas", "rel": "assigns_responsibility", "target": "srf.layer.L3", "value": "shared" }, { "source": "srf.opmodel.agent-paas", "rel": "assigns_responsibility", "target": "srf.layer.L3", "value": "shared" }, { "source": "srf.opmodel.iaas", "rel": "assigns_responsibility", "target": "srf.layer.L3", "value": "customer-owned" }, { "source": "srf.opmodel.ai-saas", "rel": "assigns_responsibility", "target": "srf.layer.L4", "value": "shared" }, { "source": "srf.opmodel.ai-paas", "rel": "assigns_responsibility", "target": "srf.layer.L4", "value": "shared" }, { "source": "srf.opmodel.agent-paas", "rel": "assigns_responsibility", "target": "srf.layer.L4", "value": "shared" }, { "source": "srf.opmodel.iaas", "rel": "assigns_responsibility", "target": "srf.layer.L4", "value": "customer-owned" }, { "source": "srf.opmodel.ai-saas", "rel": "assigns_responsibility", "target": "srf.layer.L5", "value": "N/A" }, { "source": "srf.opmodel.ai-paas", "rel": "assigns_responsibility", "target": "srf.layer.L5", "value": "model-evaluation" }, { "source": "srf.opmodel.agent-paas", "rel": "assigns_responsibility", "target": "srf.layer.L5", "value": "shared" }, { "source": "srf.opmodel.iaas", "rel": "assigns_responsibility", "target": "srf.layer.L5", "value": "customer-owned" }, { "source": "srf.concept.layer", "rel": "defined_in", "target": "srf.framework.cosai-srf" }, { "source": "srf.concept.persona", "rel": "defined_in", "target": "srf.framework.cosai-srf" }, { "source": "srf.concept.operating-model", "rel": "defined_in", "target": "srf.framework.cosai-srf" }, { "source": "srf.concept.accountability", "rel": "defined_in", "target": "srf.framework.cosai-srf" }, { "source": "srf.concept.accountable-party", "rel": "defined_in", "target": "srf.framework.cosai-srf" }, { "source": "srf.concept.responsibility-cascade", "rel": "defined_in", "target": "srf.framework.cosai-srf" }, { "source": "srf.concept.shared-responsibility", "rel": "defined_in", "target": "srf.framework.cosai-srf" }, { "source": "srf.concept.raci", "rel": "defined_in", "target": "srf.framework.cosai-srf" }, { "source": "srf.concept.autonomy-level", "rel": "defined_in", "target": "srf.framework.cosai-srf" }, { "source": "srf.concept.human-override-tier", "rel": "defined_in", "target": "srf.framework.cosai-srf" }, { "source": "srf.concept.agentic-system", "rel": "defined_in", "target": "srf.framework.cosai-srf" }, { "source": "srf.concept.control", "rel": "defined_in", "target": "srf.framework.cosai-srf" }, { "source": "srf.concept.evidence-threshold", "rel": "defined_in", "target": "srf.framework.cosai-srf" }, { "source": "srf.concept.ocsf", "rel": "defined_in", "target": "srf.framework.cosai-srf" }, { "source": "srf.concept.control-schema", "rel": "defined_in", "target": "srf.framework.cosai-srf" }, { "source": "ext.framework.nist-ai-rmf", "rel": "maps_to_layer", "target": "srf.layer.L1" }, { "source": "ext.framework.nist-ai-rmf", "rel": "maps_to_layer", "target": "srf.layer.L2" }, { "source": "ext.framework.nist-ai-rmf", "rel": "maps_to_layer", "target": "srf.layer.L3" }, { "source": "ext.framework.nist-ai-rmf", "rel": "maps_to_layer", "target": "srf.layer.L4" }, { "source": "ext.framework.nist-ai-rmf", "rel": "maps_to_layer", "target": "srf.layer.L5" }, { "source": "ext.framework.eu-ai-act", "rel": "maps_to_layer", "target": "srf.layer.L1" }, { "source": "ext.framework.eu-ai-act", "rel": "maps_to_layer", "target": "srf.layer.L2" }, { "source": "ext.framework.eu-ai-act", "rel": "maps_to_layer", "target": "srf.layer.L3" }, { "source": "ext.framework.eu-ai-act", "rel": "maps_to_layer", "target": "srf.layer.L5" }, { "source": "ext.framework.iso-42001", "rel": "maps_to_layer", "target": "srf.layer.L1" }, { "source": "ext.framework.iso-42001", "rel": "maps_to_layer", "target": "srf.layer.L2" }, { "source": "ext.framework.iso-42001", "rel": "maps_to_layer", "target": "srf.layer.L3" }, { "source": "ext.framework.iso-42001", "rel": "maps_to_layer", "target": "srf.layer.L4" }, { "source": "ext.framework.iso-42001", "rel": "maps_to_layer", "target": "srf.layer.L5" }, { "source": "ext.framework.iso-22989", "rel": "maps_to_layer", "target": "srf.layer.L1" }, { "source": "ext.framework.iso-22989", "rel": "maps_to_layer", "target": "srf.layer.L2" }, { "source": "ext.framework.iso-22989", "rel": "maps_to_layer", "target": "srf.layer.L3" }, { "source": "ext.framework.iso-22989", "rel": "maps_to_layer", "target": "srf.layer.L4" }, { "source": "ext.framework.iso-22989", "rel": "maps_to_layer", "target": "srf.layer.L5" }, { "source": "ext.framework.nist-ai-600-1", "rel": "maps_to_layer", "target": "srf.layer.L1" }, { "source": "ext.framework.nist-ai-600-1", "rel": "maps_to_layer", "target": "srf.layer.L2" }, { "source": "ext.framework.nist-ai-600-1", "rel": "maps_to_layer", "target": "srf.layer.L3" }, { "source": "ext.framework.nist-ai-600-1", "rel": "maps_to_layer", "target": "srf.layer.L4" }, { "source": "ext.framework.nist-ai-600-1", "rel": "maps_to_layer", "target": "srf.layer.L5" }, { "source": "ext.framework.nistir-8605a", "rel": "maps_to_layer", "target": "srf.layer.L1" }, { "source": "ext.framework.nistir-8605a", "rel": "maps_to_layer", "target": "srf.layer.L2" }, { "source": "ext.framework.nistir-8605a", "rel": "maps_to_layer", "target": "srf.layer.L3" }, { "source": "ext.framework.nistir-8605a", "rel": "maps_to_layer", "target": "srf.layer.L4" }, { "source": "ext.framework.nistir-8605a", "rel": "maps_to_layer", "target": "srf.layer.L5" }, { "source": "ext.framework.nist-csf-2", "rel": "maps_to_layer", "target": "srf.layer.L1" }, { "source": "ext.framework.nist-csf-2", "rel": "maps_to_layer", "target": "srf.layer.L2" }, { "source": "ext.framework.nist-csf-2", "rel": "maps_to_layer", "target": "srf.layer.L3" }, { "source": "ext.framework.nist-csf-2", "rel": "maps_to_layer", "target": "srf.layer.L4" }, { "source": "ext.framework.owasp-llm-top10", "rel": "maps_to_layer", "target": "srf.layer.L3" }, { "source": "ext.framework.owasp-llm-top10", "rel": "maps_to_layer", "target": "srf.layer.L4" }, { "source": "ext.framework.owasp-llm-top10", "rel": "maps_to_layer", "target": "srf.layer.L5" }, { "source": "ext.framework.csa-aicm", "rel": "maps_to_layer", "target": "srf.layer.L1" }, { "source": "ext.framework.csa-aicm", "rel": "maps_to_layer", "target": "srf.layer.L2" }, { "source": "ext.framework.csa-aicm", "rel": "maps_to_layer", "target": "srf.layer.L3" }, { "source": "ext.framework.csa-aicm", "rel": "maps_to_layer", "target": "srf.layer.L4" }, { "source": "ext.framework.csa-aicm", "rel": "maps_to_layer", "target": "srf.layer.L5" }, { "source": "ext.framework.mitre-atlas", "rel": "maps_to_layer", "target": "srf.layer.L3" }, { "source": "ext.framework.mitre-atlas", "rel": "maps_to_layer", "target": "srf.layer.L4" }, { "source": "ext.framework.mitre-atlas", "rel": "maps_to_layer", "target": "srf.layer.L5" }, { "source": "ext.framework.sr-26-2", "rel": "maps_to_layer", "target": "srf.layer.L1" }, { "source": "ext.framework.sr-26-2", "rel": "maps_to_layer", "target": "srf.layer.L2" }, { "source": "ext.framework.sr-26-2", "rel": "maps_to_layer", "target": "srf.layer.L5" }, { "source": "ext.framework.fda-ai-ml", "rel": "maps_to_layer", "target": "srf.layer.L1" }, { "source": "ext.framework.fda-ai-ml", "rel": "maps_to_layer", "target": "srf.layer.L3" }, { "source": "ext.framework.fda-ai-ml", "rel": "maps_to_layer", "target": "srf.layer.L5" }, { "source": "ext.framework.gdpr", "rel": "maps_to_layer", "target": "srf.layer.L1" }, { "source": "ext.framework.gdpr", "rel": "maps_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.finance.SRF-L1-DEV-001", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.finance.SRF-L1-DEV-001", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.finance.SRF-L1-DEV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.finance.SRF-L1-DEV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L1-DEV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L1-DEV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L1-DEV-002", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.finance.SRF-L1-DEV-002", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.finance.SRF-L1-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.finance.SRF-L1-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L1-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L1-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L1-DEV-003", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.finance.SRF-L1-DEV-003", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.finance.SRF-L1-DEV-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.finance.SRF-L1-DEV-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L1-DEV-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L1-DEV-004", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.finance.SRF-L1-DEV-004", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.finance.SRF-L1-DEV-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L1-VAL-001", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.finance.SRF-L1-VAL-001", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.finance.SRF-L1-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.finance.SRF-L1-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L1-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L1-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L1-MON-001", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.finance.SRF-L1-MON-001", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.finance.SRF-L1-MON-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.finance.SRF-L1-MON-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L1-MON-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L1-MON-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L1-MON-002", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.finance.SRF-L1-MON-002", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.finance.SRF-L1-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.finance.SRF-L1-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L1-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L1-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L1-MON-003", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.finance.SRF-L1-MON-003", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.finance.SRF-L1-MON-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.finance.SRF-L1-MON-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L1-MON-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L1-MON-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L1-ECH-001", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.finance.SRF-L1-ECH-001", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.finance.SRF-L1-ECH-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.finance.SRF-L1-ECH-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L1-ECH-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L1-ECH-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L2-DEV-001", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.finance.SRF-L2-DEV-001", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.finance.SRF-L2-DEV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L2-DEV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L2-DEV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L2-DEV-002", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.finance.SRF-L2-DEV-002", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.finance.SRF-L2-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.finance.SRF-L2-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L2-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L2-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L2-DEV-003", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.finance.SRF-L2-DEV-003", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.finance.SRF-L2-DEV-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L2-DEV-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L2-DEV-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L2-VAL-001", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.finance.SRF-L2-VAL-001", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.finance.SRF-L2-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L2-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L2-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L2-MON-001", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.finance.SRF-L2-MON-001", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.finance.SRF-L2-MON-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L2-MON-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L2-MON-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L2-MON-002", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.finance.SRF-L2-MON-002", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.finance.SRF-L2-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.finance.SRF-L2-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L2-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L2-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L2-MON-003", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.finance.SRF-L2-MON-003", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.finance.SRF-L2-MON-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L2-ECH-001", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.finance.SRF-L2-ECH-001", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.finance.SRF-L2-ECH-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L2-ECH-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L2-ECH-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L3-DEV-001", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.finance.SRF-L3-DEV-001", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.finance.SRF-L3-DEV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.finance.SRF-L3-DEV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L3-DEV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L3-DEV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L3-DEV-002", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.finance.SRF-L3-DEV-002", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.finance.SRF-L3-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.finance.SRF-L3-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L3-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L3-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L3-DEV-003", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.finance.SRF-L3-DEV-003", "rel": "accountable_to", "target": "srf.role.agentic-platform-provider" }, { "source": "srf.control.finance.SRF-L3-DEV-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L3-VAL-001", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.finance.SRF-L3-VAL-001", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.finance.SRF-L3-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.finance.SRF-L3-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L3-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L3-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L3-MON-001", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.finance.SRF-L3-MON-001", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.finance.SRF-L3-MON-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.finance.SRF-L3-MON-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L3-MON-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L3-MON-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L3-MON-002", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.finance.SRF-L3-MON-002", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.finance.SRF-L3-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.finance.SRF-L3-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L3-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L3-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L3-MON-003", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.finance.SRF-L3-MON-003", "rel": "accountable_to", "target": "srf.role.agentic-platform-provider" }, { "source": "srf.control.finance.SRF-L3-MON-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L3-ECH-001", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.finance.SRF-L3-ECH-001", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.finance.SRF-L3-ECH-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.finance.SRF-L3-ECH-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L3-ECH-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L3-ECH-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L4-DEV-001", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.finance.SRF-L4-DEV-001", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.finance.SRF-L4-DEV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.finance.SRF-L4-DEV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L4-DEV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L4-DEV-002", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.finance.SRF-L4-DEV-002", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.finance.SRF-L4-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.finance.SRF-L4-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L4-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L4-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L4-DEV-003", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.finance.SRF-L4-DEV-003", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.finance.SRF-L4-DEV-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L4-DEV-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L4-DEV-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L4-VAL-001", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.finance.SRF-L4-VAL-001", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.finance.SRF-L4-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.finance.SRF-L4-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L4-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L4-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L4-MON-001", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.finance.SRF-L4-MON-001", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.finance.SRF-L4-MON-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.finance.SRF-L4-MON-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L4-MON-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L4-MON-002", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.finance.SRF-L4-MON-002", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.finance.SRF-L4-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.finance.SRF-L4-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L4-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L4-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L4-MON-003", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.finance.SRF-L4-MON-003", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.finance.SRF-L4-MON-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L4-MON-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L4-MON-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L4-ECH-001", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.finance.SRF-L4-ECH-001", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.finance.SRF-L4-ECH-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.finance.SRF-L4-ECH-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L4-ECH-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L4-ECH-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L5-DEV-001", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.finance.SRF-L5-DEV-001", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.finance.SRF-L5-DEV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L5-DEV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L5-DEV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L5-DEV-002", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.finance.SRF-L5-DEV-002", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.finance.SRF-L5-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L5-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L5-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L5-DEV-003", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.finance.SRF-L5-DEV-003", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.finance.SRF-L5-DEV-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L5-DEV-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L5-DEV-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L5-VAL-001", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.finance.SRF-L5-VAL-001", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.finance.SRF-L5-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L5-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L5-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L5-MON-001", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.finance.SRF-L5-MON-001", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.finance.SRF-L5-MON-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L5-MON-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L5-MON-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L5-MON-002", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.finance.SRF-L5-MON-002", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.finance.SRF-L5-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L5-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L5-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.finance.SRF-L5-ECH-001", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.finance.SRF-L5-ECH-001", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.finance.SRF-L5-ECH-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.finance.SRF-L5-ECH-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.agent-paas" }, { "source": "srf.control.finance.SRF-L5-ECH-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.iaas" }, { "source": "srf.control.healthcare.SRF-L1-DEV-001", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.healthcare.SRF-L1-DEV-001", "rel": "accountable_to", "target": "srf.role.clinical-ai-governance" }, { "source": "srf.control.healthcare.SRF-L1-DEV-002", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.healthcare.SRF-L1-DEV-002", "rel": "accountable_to", "target": "srf.role.clinical-ai-governance" }, { "source": "srf.control.healthcare.SRF-L1-DEV-003", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.healthcare.SRF-L1-DEV-003", "rel": "accountable_to", "target": "srf.role.clinical-ai-governance" }, { "source": "srf.control.healthcare.SRF-L1-HOR-001", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.healthcare.SRF-L1-HOR-001", "rel": "accountable_to", "target": "srf.role.clinical-ai-governance" }, { "source": "srf.control.healthcare.SRF-L1-HOR-002", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.healthcare.SRF-L1-HOR-002", "rel": "accountable_to", "target": "srf.role.clinical-ai-governance" }, { "source": "srf.control.healthcare.SRF-L1-HOR-003", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.healthcare.SRF-L1-HOR-003", "rel": "accountable_to", "target": "srf.role.clinical-ai-governance" }, { "source": "srf.control.healthcare.SRF-L1-PMS-001", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.healthcare.SRF-L1-PMS-001", "rel": "accountable_to", "target": "srf.role.clinical-ai-governance" }, { "source": "srf.control.healthcare.SRF-L1-PMS-002", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.healthcare.SRF-L1-PMS-002", "rel": "accountable_to", "target": "srf.role.clinical-ai-governance" }, { "source": "srf.control.healthcare.SRF-L1-PMS-003", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.healthcare.SRF-L1-PMS-003", "rel": "accountable_to", "target": "srf.role.clinical-ai-governance" }, { "source": "srf.control.healthcare.SRF-L2-DEV-001", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.healthcare.SRF-L2-DEV-001", "rel": "accountable_to", "target": "srf.role.clinical-data-steward" }, { "source": "srf.control.healthcare.SRF-L2-DEV-002", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.healthcare.SRF-L2-DEV-002", "rel": "accountable_to", "target": "srf.role.clinical-data-steward" }, { "source": "srf.control.healthcare.SRF-L2-DEV-003", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.healthcare.SRF-L2-DEV-003", "rel": "accountable_to", "target": "srf.role.clinical-data-steward" }, { "source": "srf.control.healthcare.SRF-L2-VV-001", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.healthcare.SRF-L2-VV-001", "rel": "accountable_to", "target": "srf.role.clinical-data-steward" }, { "source": "srf.control.healthcare.SRF-L2-VV-002", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.healthcare.SRF-L2-VV-002", "rel": "accountable_to", "target": "srf.role.clinical-data-steward" }, { "source": "srf.control.healthcare.SRF-L2-PMS-001", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.healthcare.SRF-L2-PMS-001", "rel": "accountable_to", "target": "srf.role.clinical-data-steward" }, { "source": "srf.control.healthcare.SRF-L2-PMS-002", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.healthcare.SRF-L2-PMS-002", "rel": "accountable_to", "target": "srf.role.clinical-data-steward" }, { "source": "srf.control.healthcare.SRF-L2-PMS-003", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.healthcare.SRF-L2-PMS-003", "rel": "accountable_to", "target": "srf.role.clinical-data-steward" }, { "source": "srf.control.healthcare.SRF-L3-DEV-001", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.healthcare.SRF-L3-DEV-001", "rel": "accountable_to", "target": "srf.role.clinical-application-developer" }, { "source": "srf.control.healthcare.SRF-L3-DEV-002", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.healthcare.SRF-L3-DEV-002", "rel": "accountable_to", "target": "srf.role.clinical-application-developer" }, { "source": "srf.control.healthcare.SRF-L3-DEV-003", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.healthcare.SRF-L3-DEV-003", "rel": "accountable_to", "target": "srf.role.clinical-application-developer" }, { "source": "srf.control.healthcare.SRF-L3-VV-001", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.healthcare.SRF-L3-VV-001", "rel": "accountable_to", "target": "srf.role.clinical-application-developer" }, { "source": "srf.control.healthcare.SRF-L3-VV-002", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.healthcare.SRF-L3-VV-002", "rel": "accountable_to", "target": "srf.role.clinical-application-developer" }, { "source": "srf.control.healthcare.SRF-L3-PMS-001", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.healthcare.SRF-L3-PMS-001", "rel": "accountable_to", "target": "srf.role.clinical-application-developer" }, { "source": "srf.control.healthcare.SRF-L3-PMS-002", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.healthcare.SRF-L3-PMS-002", "rel": "accountable_to", "target": "srf.role.clinical-application-developer" }, { "source": "srf.control.healthcare.SRF-L3-PMS-003", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.healthcare.SRF-L3-PMS-003", "rel": "accountable_to", "target": "srf.role.clinical-application-developer" }, { "source": "srf.control.healthcare.SRF-L4-DEV-001", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.healthcare.SRF-L4-DEV-001", "rel": "accountable_to", "target": "srf.role.health-platform-provider" }, { "source": "srf.control.healthcare.SRF-L4-DEV-002", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.healthcare.SRF-L4-DEV-002", "rel": "accountable_to", "target": "srf.role.health-platform-provider" }, { "source": "srf.control.healthcare.SRF-L4-DEV-003", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.healthcare.SRF-L4-DEV-003", "rel": "accountable_to", "target": "srf.role.health-platform-provider" }, { "source": "srf.control.healthcare.SRF-L4-VV-001", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.healthcare.SRF-L4-VV-001", "rel": "accountable_to", "target": "srf.role.health-platform-provider" }, { "source": "srf.control.healthcare.SRF-L4-VV-002", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.healthcare.SRF-L4-VV-002", "rel": "accountable_to", "target": "srf.role.health-platform-provider" }, { "source": "srf.control.healthcare.SRF-L4-PMS-001", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.healthcare.SRF-L4-PMS-001", "rel": "accountable_to", "target": "srf.role.health-platform-provider" }, { "source": "srf.control.healthcare.SRF-L4-PMS-002", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.healthcare.SRF-L4-PMS-002", "rel": "accountable_to", "target": "srf.role.health-platform-provider" }, { "source": "srf.control.healthcare.SRF-L4-PMS-003", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.healthcare.SRF-L4-PMS-003", "rel": "accountable_to", "target": "srf.role.health-platform-provider" }, { "source": "srf.control.healthcare.SRF-L5-DEV-001", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.healthcare.SRF-L5-DEV-001", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.healthcare.SRF-L5-DEV-002", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.healthcare.SRF-L5-DEV-002", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.healthcare.SRF-L5-DEV-003", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.healthcare.SRF-L5-DEV-003", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.healthcare.SRF-L5-VV-001", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.healthcare.SRF-L5-VV-001", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.healthcare.SRF-L5-VV-002", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.healthcare.SRF-L5-VV-002", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.healthcare.SRF-L5-PMS-001", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.healthcare.SRF-L5-PMS-001", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.healthcare.SRF-L5-PMS-002", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.healthcare.SRF-L5-PMS-002", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.insurance.SRF-L1-DEV-001", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.insurance.SRF-L1-DEV-001", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.insurance.SRF-L1-DEV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.insurance.SRF-L1-DEV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L1-DEV-002", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.insurance.SRF-L1-DEV-002", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.insurance.SRF-L1-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.insurance.SRF-L1-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L1-DEV-003", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.insurance.SRF-L1-DEV-003", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.insurance.SRF-L1-DEV-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.insurance.SRF-L1-DEV-004", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.insurance.SRF-L1-DEV-004", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.insurance.SRF-L1-DEV-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.insurance.SRF-L1-DEV-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L1-DEV-005", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.insurance.SRF-L1-DEV-005", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.insurance.SRF-L1-DEV-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.insurance.SRF-L1-DEV-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L1-MON-001", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.insurance.SRF-L1-MON-001", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.insurance.SRF-L1-MON-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.insurance.SRF-L1-MON-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L1-MON-002", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.insurance.SRF-L1-MON-002", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.insurance.SRF-L1-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.insurance.SRF-L1-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L1-TPO-001", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.insurance.SRF-L1-TPO-001", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.insurance.SRF-L1-TPO-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.insurance.SRF-L1-TPO-002", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.insurance.SRF-L1-TPO-002", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.insurance.SRF-L1-TPO-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.insurance.SRF-L1-TPO-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L2-DEV-001", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.insurance.SRF-L2-DEV-001", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.insurance.SRF-L2-DEV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.insurance.SRF-L2-DEV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L2-DEV-002", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.insurance.SRF-L2-DEV-002", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.insurance.SRF-L2-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.insurance.SRF-L2-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L2-DEV-003", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.insurance.SRF-L2-DEV-003", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.insurance.SRF-L2-DEV-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L2-VAL-001", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.insurance.SRF-L2-VAL-001", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.insurance.SRF-L2-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.insurance.SRF-L2-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L2-MON-001", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.insurance.SRF-L2-MON-001", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.insurance.SRF-L2-MON-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L2-MON-002", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.insurance.SRF-L2-MON-002", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.insurance.SRF-L2-MON-003", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.insurance.SRF-L2-MON-003", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.insurance.SRF-L2-MON-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L2-TPO-001", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.insurance.SRF-L2-TPO-001", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.insurance.SRF-L2-TPO-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.insurance.SRF-L3-DEV-001", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.insurance.SRF-L3-DEV-001", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.insurance.SRF-L3-DEV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.insurance.SRF-L3-DEV-002", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.insurance.SRF-L3-DEV-002", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.insurance.SRF-L3-VAL-001", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.insurance.SRF-L3-VAL-001", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.insurance.SRF-L3-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.insurance.SRF-L3-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L3-VAL-002", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.insurance.SRF-L3-VAL-002", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.insurance.SRF-L3-VAL-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.insurance.SRF-L3-VAL-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L3-VAL-003", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.insurance.SRF-L3-VAL-003", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.insurance.SRF-L3-VAL-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L3-MON-001", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.insurance.SRF-L3-MON-001", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.insurance.SRF-L3-MON-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.insurance.SRF-L3-MON-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L3-MON-002", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.insurance.SRF-L3-MON-002", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.insurance.SRF-L3-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.insurance.SRF-L3-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L3-TPO-001", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.insurance.SRF-L3-TPO-001", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.insurance.SRF-L3-TPO-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.insurance.SRF-L4-DEV-001", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.insurance.SRF-L4-DEV-001", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.insurance.SRF-L4-DEV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L4-DEV-002", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.insurance.SRF-L4-DEV-002", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.insurance.SRF-L4-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.insurance.SRF-L4-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L4-DEV-003", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.insurance.SRF-L4-DEV-003", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.insurance.SRF-L4-DEV-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.insurance.SRF-L4-DEV-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L4-VAL-001", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.insurance.SRF-L4-VAL-001", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.insurance.SRF-L4-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.insurance.SRF-L4-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L4-MON-001", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.insurance.SRF-L4-MON-001", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.insurance.SRF-L4-MON-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L4-MON-002", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.insurance.SRF-L4-MON-002", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.insurance.SRF-L4-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.insurance.SRF-L4-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L4-MON-003", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.insurance.SRF-L4-MON-003", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.insurance.SRF-L4-MON-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L4-TPO-001", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.insurance.SRF-L4-TPO-001", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.insurance.SRF-L4-TPO-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.insurance.SRF-L5-DEV-001", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.insurance.SRF-L5-DEV-001", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.insurance.SRF-L5-DEV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L5-DEV-002", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.insurance.SRF-L5-DEV-002", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.insurance.SRF-L5-DEV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L5-VAL-001", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.insurance.SRF-L5-VAL-001", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.insurance.SRF-L5-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L5-VAL-002", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.insurance.SRF-L5-VAL-002", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.insurance.SRF-L5-VAL-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L5-MON-001", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.insurance.SRF-L5-MON-001", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.insurance.SRF-L5-MON-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L5-MON-002", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.insurance.SRF-L5-MON-002", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.insurance.SRF-L5-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.insurance.SRF-L5-TPO-001", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.insurance.SRF-L5-TPO-001", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.insurance.SRF-L5-TPO-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L1-ACQ-001", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.public-sector.SRF-L1-ACQ-001", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.public-sector.SRF-L1-ACQ-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L1-ACQ-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L1-ACQ-002", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.public-sector.SRF-L1-ACQ-002", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.public-sector.SRF-L1-ACQ-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L1-ACQ-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L1-ACQ-003", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.public-sector.SRF-L1-ACQ-003", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.public-sector.SRF-L1-ACQ-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L1-ACQ-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L1-ACQ-004", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.public-sector.SRF-L1-ACQ-004", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.public-sector.SRF-L1-ACQ-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L1-ACQ-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L1-MON-005", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.public-sector.SRF-L1-MON-005", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.public-sector.SRF-L1-MON-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L1-MON-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L1-OVR-006", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.public-sector.SRF-L1-OVR-006", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.public-sector.SRF-L1-OVR-006", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L1-OVR-006", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L1-ACQ-007", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.public-sector.SRF-L1-ACQ-007", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.public-sector.SRF-L1-ACQ-007", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L1-ACQ-007", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L1-ACQ-008", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.public-sector.SRF-L1-ACQ-008", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.public-sector.SRF-L1-ACQ-008", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L1-ACQ-008", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L1-MON-009", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.public-sector.SRF-L1-MON-009", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.public-sector.SRF-L1-MON-009", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L1-MON-009", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L2-ACQ-001", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.public-sector.SRF-L2-ACQ-001", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.public-sector.SRF-L2-ACQ-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L2-ACQ-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L2-ACQ-002", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.public-sector.SRF-L2-ACQ-002", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.public-sector.SRF-L2-ACQ-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L2-ACQ-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L2-ACQ-003", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.public-sector.SRF-L2-ACQ-003", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.public-sector.SRF-L2-ACQ-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L2-ACQ-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L2-MON-004", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.public-sector.SRF-L2-MON-004", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.public-sector.SRF-L2-MON-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L2-MON-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L2-ACQ-005", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.public-sector.SRF-L2-ACQ-005", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.public-sector.SRF-L2-ACQ-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L2-ACQ-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L2-MON-006", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.public-sector.SRF-L2-MON-006", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.public-sector.SRF-L2-MON-006", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L2-MON-006", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L2-MON-007", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.public-sector.SRF-L2-MON-007", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.public-sector.SRF-L2-MON-007", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L2-MON-007", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L2-ACQ-008", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.public-sector.SRF-L2-ACQ-008", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.public-sector.SRF-L2-ACQ-008", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L2-ACQ-008", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L3-VAL-001", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.public-sector.SRF-L3-VAL-001", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.public-sector.SRF-L3-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L3-VAL-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L3-VAL-002", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.public-sector.SRF-L3-VAL-002", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.public-sector.SRF-L3-VAL-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L3-VAL-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L3-VAL-003", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.public-sector.SRF-L3-VAL-003", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.public-sector.SRF-L3-VAL-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L3-VAL-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L3-OVR-004", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.public-sector.SRF-L3-OVR-004", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.public-sector.SRF-L3-OVR-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L3-OVR-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L3-OVR-005", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.public-sector.SRF-L3-OVR-005", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.public-sector.SRF-L3-OVR-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L3-OVR-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L3-MON-006", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.public-sector.SRF-L3-MON-006", "rel": "accountable_to", "target": "srf.role.agentic-platform-provider" }, { "source": "srf.control.public-sector.SRF-L3-VAL-007", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.public-sector.SRF-L3-VAL-007", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.public-sector.SRF-L3-OVR-008", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.public-sector.SRF-L3-OVR-008", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.public-sector.SRF-L3-OVR-008", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L3-OVR-008", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L4-ACQ-001", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.public-sector.SRF-L4-ACQ-001", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.public-sector.SRF-L4-ACQ-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L4-ACQ-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L4-ACQ-002", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.public-sector.SRF-L4-ACQ-002", "rel": "accountable_to", "target": "srf.role.agentic-platform-provider" }, { "source": "srf.control.public-sector.SRF-L4-ACQ-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L4-ACQ-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L4-ACQ-003", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.public-sector.SRF-L4-ACQ-003", "rel": "accountable_to", "target": "srf.role.agentic-platform-provider" }, { "source": "srf.control.public-sector.SRF-L4-ACQ-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L4-ACQ-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L4-MON-004", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.public-sector.SRF-L4-MON-004", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.public-sector.SRF-L4-MON-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L4-MON-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L4-MON-005", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.public-sector.SRF-L4-MON-005", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.public-sector.SRF-L4-MON-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L4-MON-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L4-MON-006", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.public-sector.SRF-L4-MON-006", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.public-sector.SRF-L4-MON-006", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L4-MON-006", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L4-VAL-007", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.public-sector.SRF-L4-VAL-007", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.public-sector.SRF-L4-VAL-007", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L4-VAL-007", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L4-MON-008", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.public-sector.SRF-L4-MON-008", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.public-sector.SRF-L4-MON-008", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L4-MON-008", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L5-ACQ-001", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.public-sector.SRF-L5-ACQ-001", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.public-sector.SRF-L5-ACQ-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L5-ACQ-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L5-MON-002", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.public-sector.SRF-L5-MON-002", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.public-sector.SRF-L5-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L5-MON-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L5-ACQ-003", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.public-sector.SRF-L5-ACQ-003", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.public-sector.SRF-L5-ACQ-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L5-MON-004", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.public-sector.SRF-L5-MON-004", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.public-sector.SRF-L5-MON-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L5-MON-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L5-ACQ-005", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.public-sector.SRF-L5-ACQ-005", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.public-sector.SRF-L5-ACQ-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L5-ACQ-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L5-MON-006", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.public-sector.SRF-L5-MON-006", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.public-sector.SRF-L5-MON-006", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L5-MON-006", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.public-sector.SRF-L5-MON-007", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.public-sector.SRF-L5-MON-007", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.public-sector.SRF-L5-MON-007", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.public-sector.SRF-L5-MON-007", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L1-ACQ-001", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.defense.SRF-L1-ACQ-001", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.defense.SRF-L1-ACQ-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L1-ACQ-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L1-ACQ-002", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.defense.SRF-L1-ACQ-002", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.defense.SRF-L1-ACQ-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L1-ACQ-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L1-ACQ-003", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.defense.SRF-L1-ACQ-003", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.defense.SRF-L1-ACQ-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L1-ACQ-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L1-ACQ-004", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.defense.SRF-L1-ACQ-004", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.defense.SRF-L1-ACQ-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L1-ACQ-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L1-ACQ-005", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.defense.SRF-L1-ACQ-005", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.defense.SRF-L1-ACQ-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L1-ACQ-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L1-ACQ-006", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.defense.SRF-L1-ACQ-006", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.defense.SRF-L1-ACQ-006", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L1-ACQ-006", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L1-ACQ-007", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.defense.SRF-L1-ACQ-007", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.defense.SRF-L1-ACQ-007", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L1-ACQ-007", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L1-OPS-008", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.defense.SRF-L1-OPS-008", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.defense.SRF-L1-OPS-008", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L1-OPS-008", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L1-ACQ-009", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.defense.SRF-L1-ACQ-009", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.defense.SRF-L1-ACQ-009", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L1-ACQ-009", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L1-TEVV-010", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.defense.SRF-L1-TEVV-010", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.defense.SRF-L1-TEVV-010", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L1-TEVV-010", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L2-ACQ-001", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.defense.SRF-L2-ACQ-001", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.defense.SRF-L2-ACQ-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L2-ACQ-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L2-OPS-002", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.defense.SRF-L2-OPS-002", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.defense.SRF-L2-OPS-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L2-OPS-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L2-ACQ-003", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.defense.SRF-L2-ACQ-003", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.defense.SRF-L2-ACQ-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L2-ACQ-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L2-OPS-004", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.defense.SRF-L2-OPS-004", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.defense.SRF-L2-OPS-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L2-OPS-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L2-OPS-005", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.defense.SRF-L2-OPS-005", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.defense.SRF-L2-OPS-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L2-OPS-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L2-OPS-006", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.defense.SRF-L2-OPS-006", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.defense.SRF-L2-OPS-006", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L2-OPS-006", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L2-OPS-007", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.defense.SRF-L2-OPS-007", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.defense.SRF-L2-OPS-007", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L2-OPS-007", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L2-ACQ-008", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.defense.SRF-L2-ACQ-008", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.defense.SRF-L2-ACQ-008", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L2-ACQ-008", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L3-TEVV-001", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.defense.SRF-L3-TEVV-001", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.defense.SRF-L3-TEVV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L3-TEVV-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L3-TEVV-002", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.defense.SRF-L3-TEVV-002", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.defense.SRF-L3-TEVV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L3-TEVV-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L3-OVR-003", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.defense.SRF-L3-OVR-003", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.defense.SRF-L3-OVR-004", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.defense.SRF-L3-OVR-004", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.defense.SRF-L3-OVR-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L3-OVR-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L3-OVR-005", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.defense.SRF-L3-OVR-005", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.defense.SRF-L3-OVR-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L3-OVR-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L3-OPS-006", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.defense.SRF-L3-OPS-006", "rel": "accountable_to", "target": "srf.role.agentic-platform-provider" }, { "source": "srf.control.defense.SRF-L3-OPS-007", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.defense.SRF-L3-OPS-007", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.defense.SRF-L3-OPS-007", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L3-OPS-007", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L3-ACQ-008", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.defense.SRF-L3-ACQ-008", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.defense.SRF-L3-ACQ-008", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L3-ACQ-008", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L3-OPS-009", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.defense.SRF-L3-OPS-009", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.defense.SRF-L3-OPS-009", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L3-OPS-009", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L4-ACQ-001", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.defense.SRF-L4-ACQ-001", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.defense.SRF-L4-ACQ-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L4-ACQ-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L4-ACQ-002", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.defense.SRF-L4-ACQ-002", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.defense.SRF-L4-ACQ-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L4-ACQ-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L4-ACQ-003", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.defense.SRF-L4-ACQ-003", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.defense.SRF-L4-ACQ-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L4-ACQ-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L4-OPS-004", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.defense.SRF-L4-OPS-004", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.defense.SRF-L4-OPS-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L4-OPS-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L4-OPS-005", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.defense.SRF-L4-OPS-005", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.defense.SRF-L4-OPS-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L4-OPS-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L4-OPS-006", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.defense.SRF-L4-OPS-006", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.defense.SRF-L4-OPS-006", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L4-OPS-006", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L4-ACQ-007", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.defense.SRF-L4-ACQ-007", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.defense.SRF-L4-ACQ-007", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L4-ACQ-007", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L4-ACQ-008", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.defense.SRF-L4-ACQ-008", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.defense.SRF-L4-ACQ-008", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L4-OPS-009", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.defense.SRF-L4-OPS-009", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.defense.SRF-L4-OPS-009", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L4-OPS-009", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L4-OPS-010", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.defense.SRF-L4-OPS-010", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.defense.SRF-L4-OPS-010", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L4-OPS-010", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L5-ACQ-001", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.defense.SRF-L5-ACQ-001", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.defense.SRF-L5-ACQ-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L5-ACQ-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L5-OPS-002", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.defense.SRF-L5-OPS-002", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.defense.SRF-L5-OPS-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L5-OPS-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L5-ACQ-003", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.defense.SRF-L5-ACQ-003", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.defense.SRF-L5-ACQ-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L5-OPS-004", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.defense.SRF-L5-OPS-004", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.defense.SRF-L5-OPS-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L5-OPS-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L5-ACQ-005", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.defense.SRF-L5-ACQ-005", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.defense.SRF-L5-ACQ-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L5-ACQ-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L5-OPS-006", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.defense.SRF-L5-OPS-006", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.defense.SRF-L5-OPS-006", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L5-OPS-006", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L5-ACQ-007", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.defense.SRF-L5-ACQ-007", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.defense.SRF-L5-ACQ-008", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.defense.SRF-L5-ACQ-008", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.defense.SRF-L5-ACQ-008", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L5-ACQ-008", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L1-OVR-011", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.defense.SRF-L1-OVR-011", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.defense.SRF-L1-OVR-011", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L1-OVR-011", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L2-TEVV-009", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.defense.SRF-L2-TEVV-009", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.defense.SRF-L2-TEVV-009", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L2-TEVV-009", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L2-OVR-010", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.defense.SRF-L2-OVR-010", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.defense.SRF-L2-OVR-010", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L3-TEVV-010", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.defense.SRF-L3-TEVV-010", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.defense.SRF-L3-TEVV-010", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L3-TEVV-010", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L3-TEVV-011", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.defense.SRF-L3-TEVV-011", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.defense.SRF-L3-TEVV-011", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L3-TEVV-011", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L4-TEVV-011", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.defense.SRF-L4-TEVV-011", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.defense.SRF-L4-TEVV-011", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L4-TEVV-011", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L4-OVR-012", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.defense.SRF-L4-OVR-012", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.defense.SRF-L4-OVR-012", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.defense.SRF-L5-TEVV-009", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.defense.SRF-L5-TEVV-009", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.defense.SRF-L5-TEVV-009", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.defense.SRF-L5-TEVV-009", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.manufacturing.SRF-L1-DES-001", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.manufacturing.SRF-L1-DES-001", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.manufacturing.SRF-L1-DES-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.manufacturing.SRF-L1-DES-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.manufacturing.SRF-L1-DES-002", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.manufacturing.SRF-L1-DES-002", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.manufacturing.SRF-L1-DES-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.manufacturing.SRF-L1-DES-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.manufacturing.SRF-L1-DES-003", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.manufacturing.SRF-L1-DES-003", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.manufacturing.SRF-L1-DES-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.manufacturing.SRF-L1-DES-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.manufacturing.SRF-L1-VAL-004", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.manufacturing.SRF-L1-VAL-004", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.manufacturing.SRF-L1-OPS-005", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.manufacturing.SRF-L1-OPS-005", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.manufacturing.SRF-L1-OPS-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.manufacturing.SRF-L1-DES-006", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.manufacturing.SRF-L1-DES-006", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.manufacturing.SRF-L1-DES-006", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.manufacturing.SRF-L1-DES-006", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.manufacturing.SRF-L1-OPS-007", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.manufacturing.SRF-L1-OPS-007", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.manufacturing.SRF-L1-OPS-007", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.manufacturing.SRF-L1-DES-008", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.manufacturing.SRF-L1-DES-008", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.manufacturing.SRF-L1-DES-008", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.manufacturing.SRF-L1-CHG-009", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.manufacturing.SRF-L1-CHG-009", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.manufacturing.SRF-L1-CHG-009", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.manufacturing.SRF-L1-CHG-009", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.manufacturing.SRF-L1-CHG-010", "rel": "applies_to_layer", "target": "srf.layer.L1" }, { "source": "srf.control.manufacturing.SRF-L1-CHG-010", "rel": "accountable_to", "target": "srf.role.ai-system-governance" }, { "source": "srf.control.manufacturing.SRF-L2-DES-001", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.manufacturing.SRF-L2-DES-001", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.manufacturing.SRF-L2-DES-001", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.manufacturing.SRF-L2-DES-002", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.manufacturing.SRF-L2-DES-002", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.manufacturing.SRF-L2-DES-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.manufacturing.SRF-L2-DES-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.manufacturing.SRF-L2-OPS-003", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.manufacturing.SRF-L2-OPS-003", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.manufacturing.SRF-L2-OPS-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.manufacturing.SRF-L2-OPS-004", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.manufacturing.SRF-L2-OPS-004", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.manufacturing.SRF-L2-OPS-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.manufacturing.SRF-L2-OPS-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.manufacturing.SRF-L2-VAL-005", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.manufacturing.SRF-L2-VAL-005", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.manufacturing.SRF-L2-VAL-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.manufacturing.SRF-L2-VAL-005", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.manufacturing.SRF-L2-OPS-006", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.manufacturing.SRF-L2-OPS-006", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.manufacturing.SRF-L2-OPS-007", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.manufacturing.SRF-L2-OPS-007", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.manufacturing.SRF-L2-OPS-007", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.manufacturing.SRF-L2-OPS-008", "rel": "applies_to_layer", "target": "srf.layer.L2" }, { "source": "srf.control.manufacturing.SRF-L2-OPS-008", "rel": "accountable_to", "target": "srf.role.data-provider" }, { "source": "srf.control.manufacturing.SRF-L2-OPS-008", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.manufacturing.SRF-L2-OPS-008", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.manufacturing.SRF-L3-VAL-001", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.manufacturing.SRF-L3-VAL-001", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.manufacturing.SRF-L3-VAL-002", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.manufacturing.SRF-L3-VAL-002", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.manufacturing.SRF-L3-OPS-003", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.manufacturing.SRF-L3-OPS-003", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.manufacturing.SRF-L3-VAL-004", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.manufacturing.SRF-L3-VAL-004", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.manufacturing.SRF-L3-VAL-005", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.manufacturing.SRF-L3-VAL-005", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.manufacturing.SRF-L3-VAL-006", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.manufacturing.SRF-L3-VAL-006", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.manufacturing.SRF-L3-VAL-007", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.manufacturing.SRF-L3-VAL-007", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.manufacturing.SRF-L3-OPS-008", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.manufacturing.SRF-L3-OPS-008", "rel": "accountable_to", "target": "srf.role.agentic-platform-provider" }, { "source": "srf.control.manufacturing.SRF-L3-OPS-008", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.manufacturing.SRF-L3-OPS-009", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.manufacturing.SRF-L3-OPS-009", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.manufacturing.SRF-L3-OPS-009", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.manufacturing.SRF-L3-OPS-009", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.manufacturing.SRF-L3-OPS-010", "rel": "applies_to_layer", "target": "srf.layer.L3" }, { "source": "srf.control.manufacturing.SRF-L3-OPS-010", "rel": "accountable_to", "target": "srf.role.application-developer" }, { "source": "srf.control.manufacturing.SRF-L3-OPS-010", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.manufacturing.SRF-L3-OPS-010", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.manufacturing.SRF-L4-DES-001", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.manufacturing.SRF-L4-DES-001", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.manufacturing.SRF-L4-DES-002", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.manufacturing.SRF-L4-DES-002", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.manufacturing.SRF-L4-OPS-003", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.manufacturing.SRF-L4-OPS-003", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.manufacturing.SRF-L4-CHG-004", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.manufacturing.SRF-L4-CHG-004", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.manufacturing.SRF-L4-OPS-005", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.manufacturing.SRF-L4-OPS-005", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.manufacturing.SRF-L4-OPS-006", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.manufacturing.SRF-L4-OPS-006", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.manufacturing.SRF-L4-OPS-007", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.manufacturing.SRF-L4-OPS-007", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.manufacturing.SRF-L4-OPS-007", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.manufacturing.SRF-L4-OPS-007", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.manufacturing.SRF-L4-DES-008", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.manufacturing.SRF-L4-DES-008", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.manufacturing.SRF-L4-OPS-009", "rel": "applies_to_layer", "target": "srf.layer.L4" }, { "source": "srf.control.manufacturing.SRF-L4-OPS-009", "rel": "accountable_to", "target": "srf.role.ai-platform-provider" }, { "source": "srf.control.manufacturing.SRF-L4-OPS-009", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.manufacturing.SRF-L5-VAL-001", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.manufacturing.SRF-L5-VAL-001", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.manufacturing.SRF-L5-OPS-002", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.manufacturing.SRF-L5-OPS-002", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.manufacturing.SRF-L5-OPS-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.manufacturing.SRF-L5-OPS-002", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.manufacturing.SRF-L5-CHG-003", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.manufacturing.SRF-L5-CHG-003", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.manufacturing.SRF-L5-CHG-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.manufacturing.SRF-L5-CHG-003", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.manufacturing.SRF-L5-OPS-004", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.manufacturing.SRF-L5-OPS-004", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.manufacturing.SRF-L5-OPS-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.manufacturing.SRF-L5-OPS-004", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.manufacturing.SRF-L5-DES-005", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.manufacturing.SRF-L5-DES-005", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.manufacturing.SRF-L5-VAL-006", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.manufacturing.SRF-L5-VAL-006", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.manufacturing.SRF-L5-DES-007", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.manufacturing.SRF-L5-DES-007", "rel": "accountable_to", "target": "srf.role.model-provider" }, { "source": "srf.control.manufacturing.SRF-L5-DES-007", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-saas" }, { "source": "srf.control.manufacturing.SRF-L5-DES-007", "rel": "applies_in_operating_model", "target": "srf.opmodel.ai-paas" }, { "source": "srf.control.manufacturing.SRF-L5-DES-008", "rel": "applies_to_layer", "target": "srf.layer.L5" }, { "source": "srf.control.manufacturing.SRF-L5-DES-008", "rel": "accountable_to", "target": "srf.role.model-provider" } ] }