Advanced control principles for threat monitoring and analysis (required, with baseline and intermediate, of an AI whose inherent risk is high). Threat intelligence sources covering every part of the threat profile are prioritised and monitored; intelligence is analysed into threat summary reports with risk details and specific actions, read against the institution's risk profile and appetite to prioritise mitigation ahead of threats, and used to update security architecture and configuration standards; multiple intelligence sources, correlated log analysis, alerts, internal traffic flows and geopolitical events are used to predict future attacks and trends.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.