Compliance
Compliance crosswalk
How engagement output satisfies the testing requirements of major frameworks.
| Framework | Requirement | Engagement output produced |
|---|---|---|
| ISO/IEC 42001 | Clause 8.3 / 9.1 — evaluation | Per-engagement test reports |
| NIST AI RMF | MEASURE-2.7 — adversarial testing | Per-engagement test reports |
| EU AI Act | Article 15 — accuracy, robustness, cybersecurity | High-risk system test reports |
| OSFI E-21 | Operational resilience testing | Compliance-driven engagement output |
| NYDFS Part 500 | §500.05 — penetration testing | Engagement output where in scope |
For more depth see Playbook chapter 12.