Audit AI INDUSTRY

English reading view of the same profile and control identifiers. The canonical versioned artifact is preserved; this translation does not create new requirements.

This profile uses 12 common controls, maintained in one catalog. Scope: Public website and read-only audit MCP, separation of editorial functions, collection, processing, publication authorization and provided evidence. The specific plan identifies included functions and the sample.

Project conditions

• Explain that source availability does not establish trustworthiness; a citation does not confirm truth; authorization for automatic publication is not manual review of every article.
• Link the public record to a specific revision or approved snapshot without internal release identities.
• Reading audit evidence through MCP must not trigger an audit, publication or editorial processing.
• A public tool must not hide an error behind an invented successful result.

Audit AI INDUSTRY: plan, example and integration status

Common controls

• AC-C01 · Subject, purpose and assessment boundaries
• AC-C02 · Identity and access to protected functions
• AC-C03 · Session lifetime and termination
• AC-C04 · Authorization of functions, objects and fields
• AC-C05 · Minimization and protection of disclosed data
• AC-C06 · Input and contract validation
• AC-C07 · Operation order, limits and repetition
• AC-C08 · Evidence provenance and linkage
• AC-C09 · Record retention and protection
• AC-C10 · Safe failure
• AC-C11 · Interpretation, independence and incompleteness
• AC-C12 · Remediation and reassessment

AI CORE texts are its own operationalizations of selected requirements. Partial mapping is not a claim of full equivalence or endorsement by OWASP, NIST or W3C.

Profile license: CC BY-SA 4.0. Adaptations and methodological additions: AISYSTEMS s. r. o. Source attribution.