Operate AI incident reporting + regulatory compliance + public reporting + international cooperation per OECD AI Principles + applicable regulation + voluntary commitment. AI incident reporting and response must (a) detect + assess + respond to AI incidents including model failure + bias incident + safety event + adversarial attack + privacy breach + misuse + emergent capability + agentic action gone wrong + (b) report incidents per applicable regulation (EU AI Act Article 73 serious incident reporting + sector-specific reporting + voluntary commitments) + (c) maintain incident learning loop feeding back to risk management + design + deployment. Regulatory compliance for AI must (a) maintain AI-regulatory inventory across applicable jurisdictions (EU AI Act + UK AI regulation + US federal + state + sectoral + Canada + Australia + Japan + similar) + (b) monitor for change + integrate new requirements into AI governance + (c) coordinate with broader compliance function including privacy + cyber + consumer protection + competition + employment. Public reporting and accountability to society must (a) maintain transparency about AI use + outcomes + harms + remediation per applicable expectation + (b) engage with civil society + academia + media + public per organisational AI strategy + (c) participate in industry voluntary commitments where appropriate (Frontier Model Forum + similar). International cooperation for trustworthy AI must (a) participate in international AI governance dialogues + (b) align cross-border AI deployment with applicable regulation in each jurisdiction + (c) coordinate cross-border AI incident response.
This control maps to 25 controls across 17 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 25 it maps to, and the evidence behind each claim, over MCP and REST.