# Standards inform governance. Scope determines applicability.

An Observatory reading guide to primary sources, with clear separation between law, standards and recommendations.

## Read the original source

Check the issuing organization, edition, publication date, jurisdiction and current amendments. Licensed standards require appropriate access; a public summary is not a substitute for the full instrument.

## Review the mapping

Control mappings require named reviewers, evidence expectations and an applicability decision. Crosswalks remain research candidates until approved. No one-to-one equivalence is assumed.

## Track change

A changed source requires a new version and impact review. Preserve prior mappings and assessment versions rather than rewriting historical conclusions.

## NIST AI RMF

Organizational AI risk management.

Source: https://www.nist.gov/itl/ai-risk-management-framework

NIST; version 1.0; publication 2023-01-26; editorial review pending. Metadata and original summary only; no full-text ingestion

## NIST AI 600-1, Generative AI Profile

Risk management considerations for generative AI.

Source: https://doi.org/10.6028/NIST.AI.600-1

NIST; version AI 600-1; publication 2024-07-26; editorial review pending. Metadata and original summary only; no full-text ingestion

## ISO/IEC 42001

AI management systems. Restricted standard text; link and metadata only.

Source: https://www.iso.org/standard/42001

ISO / IEC; version 2023; publication 2023-12; editorial review pending. Metadata and original summary only; no full-text ingestion

## ISO/IEC 23894

AI risk management guidance. Restricted standard text; link and metadata only.

Source: https://webstore.iec.ch/en/publication/82914

ISO / IEC; version 2023; publication 2023-02-06; editorial review pending. Metadata and original summary only; no full-text ingestion

## OECD AI Principles

Trustworthy AI principles. Check the current recommendation and revisions.

Source: https://www.oecd.org/en/about/news/press-releases/2024/05/oecd-updates-ai-principles-to-stay-abreast-of-rapid-technological-developments.html

OECD; version 2024 revision; publication 2024-05-03; editorial review pending. Metadata and original summary only; no full-text ingestion

## UNESCO Recommendation on AI Ethics

Recommendation adopted on 23 November 2021. Ethical and human-rights considerations for AI governance.

Source: https://www.unesco.org/en/legal-affairs/recommendation-ethics-artificial-intelligence

UNESCO; version 2021 recommendation; publication 2021-11-23; editorial review pending. Metadata and original summary only; no full-text ingestion

## EU AI Act

Applicability depends on role, system and current amended legal text. Legal review required.

Source: https://eur-lex.europa.eu/eli/reg/2024/1689/oj

European Union; version unknown; publication unknown; editorial review pending. Metadata and original summary only; no full-text ingestion

## Council of Europe Framework Convention on AI

Opened for signature on 5 September 2024. Party status, entry into force and domestic implementation require separate review.

Source: https://www.coe.int/en/web/artificial-intelligence/the-framework-convention-on-artificial-intelligence

Council of Europe; version CETS No. 225; publication unknown; editorial review pending. Metadata and original summary only; no full-text ingestion

## FSB Responsible AI adoption practices

Twelve sound practices for responsible AI adoption by financial institutions. Final report following the June 2026 consultation.

Source: https://www.fsb.org/2026/10/sound-practices-for-responsible-adoption-of-artificial-intelligence-ai-final-report/

Financial Stability Board; version Final report; publication 2026-10-15; editorial review pending. Metadata and original summary only; no full-text ingestion

## Singapore Model AI Governance Framework

Organizational governance guidance; confirm applicable edition.

Source: https://www.pdpc.gov.sg/help-and-resources/2020/01/model-ai-governance-framework

IMDA / PDPC; version unknown; publication unknown; editorial review pending. Metadata and original summary only; no full-text ingestion

## Singapore agentic AI framework

Updated agentic AI governance framework announced on 20 May 2026. Applicability and control mappings remain subject to review.

Source: https://www.imda.gov.sg/resources/press-releases-factsheets-and-speeches/updated-model-ai-governance-framework-for-agentic-ai

IMDA; version May 2026 update; publication 2026-05-20; editorial review pending. Metadata and original summary only; no full-text ingestion

## IEEE 7000

Ethical concerns in system design. Licensed text is not reproduced.

Source: https://standards.ieee.org/standard/7000-2021.html

IEEE; version 2021; publication 2021-09-15; editorial review pending. Metadata and original summary only; no full-text ingestion

## OWASP LLM / GenAI Top 10

LLM application security risks. Exact publication date remains unconfirmed.

Source: https://genai.owasp.org/resource/owasp-genai-llm-top-10-2026/

OWASP; version 2026; publication unknown; editorial review pending. Metadata and original summary only; no full-text ingestion

## OWASP Top 10 for Agentic Applications

Agentic application security risks.

Source: https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/

OWASP; version 2026; publication 2025-12-09; editorial review pending. Metadata and original summary only; no full-text ingestion

## MITRE ATLAS

Adversarial threats to AI systems. A living resource rather than a fixed certification standard.

Source: https://atlas.mitre.org/

MITRE; version unknown; publication unknown; editorial review pending. Metadata and original summary only; no full-text ingestion

## MIT AI Risk Repository

A research resource for describing AI risks, not a measure of incident prevalence.

Source: https://airisk.mit.edu/

MIT AI Risk Initiative; version unknown; publication unknown; editorial review pending. Metadata and original summary only; no full-text ingestion

## Explore

- [Responsible AI Observatory](/responsible-ai)

- [Standards inform governance. Scope determines applicability.](/responsible-ai/standards)

- [Research that makes governance examinable.](/responsible-ai/research)

- [Make risk accountable.](/responsible-ai/risks)

- [Build judgment before the consequential decision.](/responsible-ai/board-education)

- [Make the method visible.](/responsible-ai/methodology)

- [Comparable evidence comes before comparison.](/responsible-ai/benchmarks)
