Establish Generative AI governance per NIST AI 600-1 governance actions including: dedicated GAI governance function with named accountable officer + policies covering data + model + deployment + use cases + risk acceptance and residual risk decisions documented at appropriate level + compliance with NIST AI RMF GOVERN function (GOV-1 through GOV-6) + AI ethics committee + AI inventory + AI use case approval workflow.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.