Control Evidence Mappings
Each control mapping documents what evidence Vallum produces to support your compliance program, what it does not produce, known limitations, and what remains your responsibility.
Published (20)
AI-RMF-GOV-1: Establish governance structures for AI risk management across the organization
NIST AI RMF 1.0 · SUPPORTED EVIDENCE · TESTED
AI-RMF-GOV-2: Define roles, responsibilities, and authority for AI risk decisions
NIST AI RMF 1.0 · SUPPORTED EVIDENCE · TESTED
AI-RMF-GOV-3: Implement organizational policies for responsible AI development and deployment
NIST AI RMF 1.0 · SUPPORTED EVIDENCE · TESTED
AI-RMF-GOV-4: Establish processes for AI system documentation and transparency
NIST AI RMF 1.0 · SUPPORTED EVIDENCE · TESTED
AI-RMF-GOV-5: Create mechanisms for ongoing AI risk assessment and monitoring
NIST AI RMF 1.0 · SUPPORTED EVIDENCE · TESTED
AI-RMF-MAP-1: Identify and document AI system context, purpose, and intended use
NIST AI RMF 1.0 · PARTIAL TECHNICAL SUPPORT · SUPPORTED
AI-RMF-MAP-2: Map AI system dependencies, data flows, and stakeholder impacts
NIST AI RMF 1.0 · PARTIAL TECHNICAL SUPPORT · SUPPORTED
AI-RMF-MAP-3: Categorize AI risks based on likelihood, severity, and reversibility
NIST AI RMF 1.0 · PARTIAL TECHNICAL SUPPORT · SUPPORTED
AI-RMF-MEASURE-1: Develop metrics and methods for measuring AI system performance and risk
NIST AI RMF 1.0 · PARTIAL TECHNICAL SUPPORT · SUPPORTED
AI-RMF-MEASURE-2: Implement testing procedures for AI system reliability and safety
NIST AI RMF 1.0 · PARTIAL TECHNICAL SUPPORT · SUPPORTED
AI-RMF-MEASURE-3: Establish benchmarks for acceptable AI system behavior and risk levels
NIST AI RMF 1.0 · INTEGRATION REQUIRED · PILOT
AI-RMF-MANAGE-1: Implement risk response strategies for identified AI risks
NIST AI RMF 1.0 · INTEGRATION REQUIRED · PILOT
AI-RMF-MANAGE-2: Establish processes for AI incident response and escalation
NIST AI RMF 1.0 · INTEGRATION REQUIRED · PILOT
AI-RMF-MANAGE-3: Create mechanisms for continuous improvement of AI risk management
NIST AI RMF 1.0 · INTEGRATION REQUIRED · PILOT
AI-RMF-MANAGE-4: Develop stakeholder communication procedures for AI risk information
NIST AI RMF 1.0 · INTEGRATION REQUIRED · PILOT
AI-RMF-MANAGE-5: Establish AI system decommissioning procedures with data retention requirements
NIST AI RMF 1.0 · INTEGRATION REQUIRED · PILOT
AI-RMF-MANAGE-6: Implement third-party AI component risk assessment and monitoring
NIST AI RMF 1.0 · INTEGRATION REQUIRED · PILOT
AI-RMF-MANAGE-7: Develop AI system performance degradation detection and response procedures
NIST AI RMF 1.0 · INTEGRATION REQUIRED · PILOT
AI-RMF-MANAGE-8: Establish AI model versioning and rollback procedures for production systems
NIST AI RMF 1.0 · INTEGRATION REQUIRED · PILOT
AI-RMF-MANAGE-9: Implement AI system boundary definition and scope management processes
NIST AI RMF 1.0 · INTEGRATION REQUIRED · PILOT