{
 "profile": {
  "uuid": "f461e2e4-b3c6-5322-9d5a-392f65a86d06",
  "metadata": {
   "title": "CoSAI AI SRF — Manufacturing Vertical Profile (Proposed Extension)",
   "last-modified": "2026-07-28T22:58:14+00:00",
   "version": "0.1.0",
   "oscal-version": "1.2.2",
   "props": [
    {
     "name": "vertical",
     "ns": "https://aisharedresponsibility.com/ns/oscal",
     "value": "manufacturing"
    },
    {
     "name": "source",
     "ns": "https://aisharedresponsibility.com/ns/oscal",
     "value": "https://aisharedresponsibility.com/data/manufacturing-controls.json"
    },
    {
     "name": "control-count",
     "ns": "https://aisharedresponsibility.com/ns/oscal",
     "value": "45"
    },
    {
     "name": "regulatory-driver",
     "ns": "https://aisharedresponsibility.com/ns/oscal",
     "value": "aicm"
    },
    {
     "name": "regulatory-driver",
     "ns": "https://aisharedresponsibility.com/ns/oscal",
     "value": "eu_ai_act"
    },
    {
     "name": "regulatory-driver",
     "ns": "https://aisharedresponsibility.com/ns/oscal",
     "value": "eu_machinery_reg"
    },
    {
     "name": "regulatory-driver",
     "ns": "https://aisharedresponsibility.com/ns/oscal",
     "value": "iec_61508"
    },
    {
     "name": "regulatory-driver",
     "ns": "https://aisharedresponsibility.com/ns/oscal",
     "value": "iec_62443"
    },
    {
     "name": "regulatory-driver",
     "ns": "https://aisharedresponsibility.com/ns/oscal",
     "value": "iso_42001"
    },
    {
     "name": "regulatory-driver",
     "ns": "https://aisharedresponsibility.com/ns/oscal",
     "value": "nist_ai_rmf"
    },
    {
     "name": "regulatory-driver",
     "ns": "https://aisharedresponsibility.com/ns/oscal",
     "value": "nist_cyber_ai"
    },
    {
     "name": "regulatory-driver",
     "ns": "https://aisharedresponsibility.com/ns/oscal",
     "value": "owasp_llm"
    }
   ],
   "links": [
    {
     "href": "https://aisharedresponsibility.com/manufacturing/",
     "rel": "canonical"
    },
    {
     "href": "https://aisharedresponsibility.com/manufacturing/controls/",
     "rel": "reference",
     "text": "Manufacturing controls page"
    },
    {
     "href": "#97cd3d25-cf40-53a0-9616-8ce8875cdc2f",
     "rel": "reference",
     "text": "CSA AI Controls Matrix"
    },
    {
     "href": "#51bbabe9-02b8-5813-994d-891f4c95ef21",
     "rel": "reference",
     "text": "EU Artificial Intelligence Act (Regulation (EU) 2024/1689)"
    },
    {
     "href": "#5f62c959-7f28-53d4-b324-ca1206fc7e66",
     "rel": "reference",
     "text": "EU Machinery Regulation (Regulation (EU) 2023/1230)"
    },
    {
     "href": "#baa4cf26-6159-56d6-a26d-4cb096e75b6c",
     "rel": "reference",
     "text": "IEC 61508 — Functional Safety"
    },
    {
     "href": "#01f21329-1e0e-552c-a9a1-76432e1fd8a1",
     "rel": "reference",
     "text": "ISA/IEC 62443 — Industrial Automation and Control Systems Security"
    },
    {
     "href": "#42ceecfa-0c80-5ecf-b832-45f0beb1184a",
     "rel": "reference",
     "text": "ISO/IEC 42001 — AI Management Systems"
    },
    {
     "href": "#c00b1cec-7990-5779-b1cf-10a2e792f026",
     "rel": "reference",
     "text": "NIST AI Risk Management Framework"
    },
    {
     "href": "#dddeb933-c487-5679-983a-19ae3a3355a2",
     "rel": "reference",
     "text": "NIST Cyber AI Profile (in development)"
    },
    {
     "href": "#c403b49d-9023-519a-a9f4-fefbab79a3ce",
     "rel": "reference",
     "text": "OWASP Top 10 for Large Language Model Applications"
    }
   ],
   "remarks": "Three converging deadlines anchor this vertical. EU AI Act (Regulation 2024/1689) high-risk provider and deployer obligations take effect August 2, 2026. EU Machinery Regulation (EU) 2023/1230 applies from January 20, 2027, making AI safety components in machinery automatically high-risk under the AI Act. IEC 62443 governs OT/ICS cybersecurity via a zone-and-conduit model; ISA-TR62443-2-2-2025 (December 2025) updated the series but added no AI-specific controls. ISO 42001:2023 provides the quality management system anchor for EU AI Act Article 17 compliance but assigns no accountable party per control. The NIST Cybersecurity Framework Profile for Artificial Intelligence (Cyber AI Profile) was published as a preliminary draft in December 2025 and is not yet final. This schema fills the AI governance gap in each of these frameworks by assigning a named accountable persona, measurable threshold, and machine-readable evidence pointer to every control. Industry vertical schemas are independently proposed extensions and are not part of the official CoSAI release. Mapping IDs marked TBD are unverified and are carried verbatim as props, never as links; do not substitute invented IDs. Generated from data/*-controls.json."
  },
  "imports": [
   {
    "href": "https://aisharedresponsibility.com/export/srf-oscal-verticals-catalog.json",
    "include-controls": [
     {
      "with-ids": [
       "mfg-srf-l1-des-001",
       "mfg-srf-l1-des-002",
       "mfg-srf-l1-des-003",
       "mfg-srf-l1-val-004",
       "mfg-srf-l1-ops-005",
       "mfg-srf-l1-des-006",
       "mfg-srf-l1-ops-007",
       "mfg-srf-l1-des-008",
       "mfg-srf-l1-chg-009",
       "mfg-srf-l1-chg-010",
       "mfg-srf-l2-des-001",
       "mfg-srf-l2-des-002",
       "mfg-srf-l2-ops-003",
       "mfg-srf-l2-ops-004",
       "mfg-srf-l2-val-005",
       "mfg-srf-l2-ops-006",
       "mfg-srf-l2-ops-007",
       "mfg-srf-l2-ops-008",
       "mfg-srf-l3-val-001",
       "mfg-srf-l3-val-002",
       "mfg-srf-l3-ops-003",
       "mfg-srf-l3-val-004",
       "mfg-srf-l3-val-005",
       "mfg-srf-l3-val-006",
       "mfg-srf-l3-val-007",
       "mfg-srf-l3-ops-008",
       "mfg-srf-l3-ops-009",
       "mfg-srf-l3-ops-010",
       "mfg-srf-l4-des-001",
       "mfg-srf-l4-des-002",
       "mfg-srf-l4-ops-003",
       "mfg-srf-l4-chg-004",
       "mfg-srf-l4-ops-005",
       "mfg-srf-l4-ops-006",
       "mfg-srf-l4-ops-007",
       "mfg-srf-l4-des-008",
       "mfg-srf-l4-ops-009",
       "mfg-srf-l5-val-001",
       "mfg-srf-l5-ops-002",
       "mfg-srf-l5-chg-003",
       "mfg-srf-l5-ops-004",
       "mfg-srf-l5-des-005",
       "mfg-srf-l5-val-006",
       "mfg-srf-l5-des-007",
       "mfg-srf-l5-des-008"
      ]
     }
    ]
   }
  ],
  "merge": {
   "as-is": true
  },
  "modify": {
   "set-parameters": [
    {
     "param-id": "mfg-srf-l1-des-001-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l1-des-002-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l1-des-003-p1",
     "values": [
      "TIER_INVENTORY_STALENESS_DAYS"
     ]
    },
    {
     "param-id": "mfg-srf-l1-val-004-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l1-ops-005-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l1-des-006-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l1-ops-007-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l1-des-008-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l1-chg-009-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l1-chg-010-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l2-des-001-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l2-des-002-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l2-ops-003-p1",
     "values": [
      "0"
     ]
    },
    {
     "param-id": "mfg-srf-l2-ops-004-p1",
     "values": [
      "TIER_INPUT_PSI_THRESHOLD"
     ]
    },
    {
     "param-id": "mfg-srf-l2-val-005-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l2-ops-006-p1",
     "values": [
      "TIER_OT_ANOMALY_DETECTION_COVERAGE_PCT"
     ]
    },
    {
     "param-id": "mfg-srf-l2-ops-007-p1",
     "values": [
      "TIER_LOG_RETENTION_DAYS"
     ]
    },
    {
     "param-id": "mfg-srf-l2-ops-008-p1",
     "values": [
      "0"
     ]
    },
    {
     "param-id": "mfg-srf-l3-val-001-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l3-val-002-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l3-ops-003-p1",
     "values": [
      "0"
     ]
    },
    {
     "param-id": "mfg-srf-l3-val-004-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l3-val-005-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l3-val-006-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l3-val-007-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l3-ops-008-p1",
     "values": [
      "0"
     ]
    },
    {
     "param-id": "mfg-srf-l3-ops-009-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l3-ops-010-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l4-des-001-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l4-des-002-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l4-ops-003-p1",
     "values": [
      "0"
     ]
    },
    {
     "param-id": "mfg-srf-l4-chg-004-p1",
     "values": [
      "TIER_CHANGE_RECORD_COMPLETENESS_PCT"
     ]
    },
    {
     "param-id": "mfg-srf-l4-ops-005-p1",
     "values": [
      "TIER_OT_SIEM_COVERAGE_PCT"
     ]
    },
    {
     "param-id": "mfg-srf-l4-ops-006-p1",
     "values": [
      "0"
     ]
    },
    {
     "param-id": "mfg-srf-l4-ops-007-p1",
     "values": [
      "TIER_UNENCRYPTED_FLOW_TOLERANCE"
     ]
    },
    {
     "param-id": "mfg-srf-l4-des-008-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l4-ops-009-p1",
     "values": [
      "TIER_AI_AVAILABILITY_PCT"
     ]
    },
    {
     "param-id": "mfg-srf-l5-val-001-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l5-ops-002-p1",
     "values": [
      "TIER_MODEL_PERFORMANCE_FLOOR"
     ]
    },
    {
     "param-id": "mfg-srf-l5-chg-003-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l5-ops-004-p1",
     "values": [
      "TIER_VULN_SLA_DAYS_CRITICAL"
     ]
    },
    {
     "param-id": "mfg-srf-l5-des-005-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l5-val-006-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l5-des-007-p1",
     "values": [
      "true"
     ]
    },
    {
     "param-id": "mfg-srf-l5-des-008-p1",
     "values": [
      "true"
     ]
    }
   ]
  },
  "back-matter": {
   "resources": [
    {
     "uuid": "97cd3d25-cf40-53a0-9616-8ce8875cdc2f",
     "title": "CSA AI Controls Matrix",
     "props": [
      {
       "name": "framework-key",
       "ns": "https://aisharedresponsibility.com/ns/oscal",
       "value": "aicm"
      }
     ],
     "rlinks": [
      {
       "href": "https://cloudsecurityalliance.org/artifacts/ai-controls-matrix"
      }
     ]
    },
    {
     "uuid": "51bbabe9-02b8-5813-994d-891f4c95ef21",
     "title": "EU Artificial Intelligence Act (Regulation (EU) 2024/1689)",
     "props": [
      {
       "name": "framework-key",
       "ns": "https://aisharedresponsibility.com/ns/oscal",
       "value": "eu_ai_act"
      }
     ],
     "rlinks": [
      {
       "href": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689"
      }
     ]
    },
    {
     "uuid": "5f62c959-7f28-53d4-b324-ca1206fc7e66",
     "title": "EU Machinery Regulation (Regulation (EU) 2023/1230)",
     "props": [
      {
       "name": "framework-key",
       "ns": "https://aisharedresponsibility.com/ns/oscal",
       "value": "eu_machinery_reg"
      }
     ],
     "rlinks": [
      {
       "href": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32023R1230"
      }
     ]
    },
    {
     "uuid": "baa4cf26-6159-56d6-a26d-4cb096e75b6c",
     "title": "IEC 61508 — Functional Safety",
     "props": [
      {
       "name": "framework-key",
       "ns": "https://aisharedresponsibility.com/ns/oscal",
       "value": "iec_61508"
      }
     ],
     "rlinks": [
      {
       "href": "https://www.iec.ch/functional-safety"
      }
     ]
    },
    {
     "uuid": "01f21329-1e0e-552c-a9a1-76432e1fd8a1",
     "title": "ISA/IEC 62443 — Industrial Automation and Control Systems Security",
     "props": [
      {
       "name": "framework-key",
       "ns": "https://aisharedresponsibility.com/ns/oscal",
       "value": "iec_62443"
      }
     ],
     "rlinks": [
      {
       "href": "https://www.isa.org/standards-and-publications/isa-standards/isa-iec-62443-series-of-standards"
      }
     ]
    },
    {
     "uuid": "42ceecfa-0c80-5ecf-b832-45f0beb1184a",
     "title": "ISO/IEC 42001 — AI Management Systems",
     "props": [
      {
       "name": "framework-key",
       "ns": "https://aisharedresponsibility.com/ns/oscal",
       "value": "iso_42001"
      }
     ],
     "rlinks": [
      {
       "href": "https://www.iso.org/standard/81230.html"
      }
     ]
    },
    {
     "uuid": "c00b1cec-7990-5779-b1cf-10a2e792f026",
     "title": "NIST AI Risk Management Framework",
     "props": [
      {
       "name": "framework-key",
       "ns": "https://aisharedresponsibility.com/ns/oscal",
       "value": "nist_ai_rmf"
      }
     ],
     "rlinks": [
      {
       "href": "https://www.nist.gov/itl/ai-risk-management-framework"
      }
     ]
    },
    {
     "uuid": "dddeb933-c487-5679-983a-19ae3a3355a2",
     "title": "NIST Cyber AI Profile (in development)",
     "props": [
      {
       "name": "framework-key",
       "ns": "https://aisharedresponsibility.com/ns/oscal",
       "value": "nist_cyber_ai"
      }
     ],
     "rlinks": [
      {
       "href": "https://www.nist.gov/cyberframework"
      }
     ]
    },
    {
     "uuid": "c403b49d-9023-519a-a9f4-fefbab79a3ce",
     "title": "OWASP Top 10 for Large Language Model Applications",
     "props": [
      {
       "name": "framework-key",
       "ns": "https://aisharedresponsibility.com/ns/oscal",
       "value": "owasp_llm"
      }
     ],
     "rlinks": [
      {
       "href": "https://owasp.org/www-project-top-10-for-large-language-model-applications/"
      }
     ]
    }
   ]
  }
 }
}