Governance & Compliance · Data artifact

Compliance Requirement Crosswalk

Data artifactGovernance & ComplianceSafety, Security & Governancearc:ComplianceRequirementCrosswalk

A mapping from each applicable framework, standard and regulation requirement to the shared controls, metrics and evidence that satisfy it, enabling one unified governance program.

Responsibility. Maps obligations from multiple frameworks and regulations onto shared controls and evidence.

Also known as: Framework integration map, Requirements mapping, Regulatory requirements register

configuresconfiguressends data toContinuous Compliance Monitor: configuresContinuous Compliance Mo…Compliance Evidence Collector: configuresCompliance Evidence Coll…Audit Scope Definition: sends data toAudit Scope Definition
Direct neighbourhood (hover for relationship types)

Relationships

configures structural

sends data to dynamic

Design guidance

Classification

Patterns
Integrated multi-framework governanceLayering sector-specific regulation onto general frameworks
Quality attributes
Performance efficiency (ISO/IEC 25010)Functional suitability: correctness and validity (ISO/IEC 25010 | NIST AI RMF: valid)Transparency and accountability (NIST AI RMF: accountable and transparent)
Risks mitigated
Duplicative, siloed compliance processesUnaddressed sector-specific requirements
Frameworks & regulations
NIST AI RMFISO/IEC 42001ISO 31000ISO 27001ISO 27701EU AI ActGDPRHIPAAFDA guidance on AI/ML in medical devicesEEOC guidance on AI in hiringDigital Services Act

Sources

  1. Ch9.8: T. Nguyen, "Standards and Frameworks for AI Governance," in Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam, 1st ed. 2026, ch. 9.8. ISBN: 9798244538229.
  2. Ref9.06: "Auditing and Compliance Monitoring for AI Systems," unpublished reference note (references/Chapter 9 - Safety, Ethics, and Compliance/06-Auditing-Compliance-Monitoring.md), Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam supplementary materials, 2026. unpublished note