Advanced control principles for vulnerability detection (required, with baseline and intermediate, of an AI whose inherent risk is high). Vulnerability scanning rotates through all high-risk production systems during the year (and, in 2.0, endpoints on a risk basis); iCAST is conducted to find control gaps in staff behaviour, defences, policies and resources, using a threat intelligence report as its input.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.