INDEPENDENT SOURCE REGISTER • VERSION 0.6.0

A living atlas of
AI governance sources.

Original frameworks, standards, regulations and risk taxonomies. Find the publisher, trace the edition, inspect the documents, and follow how each source changes over time.

Publisher-first.

Third-party crosswalks are discovery leads, not authoritative source data.

52INSTRUMENTS

06DOMAINS

24DOCUMENT LEADS

00VERIFIED EDITIONS

01SNAPSHOTS

01 / SOURCE REGISTER

Instruments 52

AI Baseline Control Framework (AI BCF)

Jan van Dijke

Control frameworks 2 documents found

unknown Rights unreviewed

Evan Wheeler / RiskFramework.org

Risk catalogues 4 documents found

unknown Rights unreviewed

California Consumer Privacy Act (CCPA), amended

EU, US/California, Quebec, Singapore, UAE, Saudi Arabia, Qatar, Bahrain

Laws and regulations

US Rights unreviewed

CERT-In AI Security Auditing Guidelines

CERT-In, India

Management and assurance standards

IN Rights unreviewed

CIS Critical Security Controls

Center for Internet Security

Control frameworks 1 document found

international Rights unreviewed

Council of Europe AI Framework Convention

Council of Europe

Laws and regulationsPrinciples and ethical frameworks

intergovernmental Rights unreviewed

EU Ethics Guidelines for Trustworthy AI

European Commission

Principles and ethical frameworks

varies_by_instrument Rights unreviewed

Federal Personal Data Protection Law

EU, US/California, Quebec, Singapore, UAE, Saudi Arabia, Qatar, Bahrain

Laws and regulations

AE Rights unreviewed

FINOS AI Governance Framework (AIGF)

FINOS / Fintech Open Source Foundation

Risk catalogues

international Rights unreviewed

G7 Hiroshima Process Code of Conduct

G7

Laws and regulationsPrinciples and ethical frameworks

intergovernmental Rights unreviewed

General Data Protection Regulation (GDPR)

EU, US/California, Quebec, Singapore, UAE, Saudi Arabia, Qatar, Bahrain

Laws and regulations 1 document found

European Union Rights unreviewed

IEEE

Principles and ethical frameworks

varies_by_instrument Rights unreviewed

IEEE

Principles and ethical frameworks

varies_by_instrument Rights unreviewed

IEEE

Principles and ethical frameworks

varies_by_instrument Rights unreviewed

IEEE

Principles and ethical frameworks

varies_by_instrument Rights unreviewed

IEEE

Principles and ethical frameworks

varies_by_instrument Rights unreviewed

ISO/IEC 22989:2022

ISO/IEC

Management and assurance standards

international Rights unreviewed

ISO/IEC 23053:2022

ISO/IEC

Management and assurance standards

international Rights unreviewed

ISO/IEC 23894:2023

ISO/IEC

Management and assurance standards

international Rights unreviewed

ISO/IEC

Management and assurance standardsControl frameworks

international Rights unreviewed

ISO/IEC 38507:2022

ISO/IEC

Management and assurance standards

international Rights unreviewed

ISO/IEC JTC 1/SC 42

Management and assurance standardsControl frameworks 1 document found

international Rights unreviewed

ISO/IEC 42005:2025

ISO/IEC

Management and assurance standards

international Rights unreviewed

ISO/IEC 42006:2025

ISO/IEC

Management and assurance standards

international Rights unreviewed

ISO/IEC 5259-1:2024

ISO/IEC

Management and assurance standards

international Rights unreviewed

ISO/IEC 5259-2:2024

ISO/IEC

Management and assurance standards

international Rights unreviewed

ISO/IEC 5259-3:2024

ISO/IEC

Management and assurance standards

international Rights unreviewed

ISO/IEC 5259-4:2024

ISO/IEC

Management and assurance standards

international Rights unreviewed

ISO/IEC 5259-5:2025

ISO/IEC

Management and assurance standards

international Rights unreviewed

ISO/IEC 5338:2023

ISO/IEC

Management and assurance standards

international Rights unreviewed

ISO/IEC TR 24028:2020

ISO/IEC

Management and assurance standards

international Rights unreviewed

MITRE

Threat and attack taxonomies

US Rights unreviewed

NIST AI 100-2 Adversarial ML Taxonomy

NIST

Threat and attack taxonomies 1 document found

US Rights unreviewed

NIST AI 600-1 Generative AI Profile

NIST

Risk cataloguesManagement and assurance standards 1 document found

US Rights unreviewed

NIST AI Risk Management Framework

NIST

Management and assurance standards 5 documents found

US Rights unreviewed

NIST Cybersecurity Framework

NIST

Control frameworks 1 document found

US Rights unreviewed

NIST SP 800-218 Secure Software Development Framework

NIST

Control frameworks 1 document found

US Rights unreviewed

NIST SP 800-218A AI Software Development Profile

NIST

Control frameworks 1 document found

US Rights unreviewed

OECD AI Principles

OECD

Principles and ethical frameworks 1 document found

OECD member economies Rights unreviewed

OWASP Agent Control Standard (ACS)

OWASP GenAI Security Project

Control frameworks

international Rights unreviewed

OWASP MCP Top 10

OWASP

Threat and attack taxonomies

international Rights unreviewed

OWASP Top 10 for Agentic Applications

OWASP

Risk cataloguesThreat and attack taxonomies 1 document found

international Rights unreviewed

OWASP Top 10 for Large Language Model Applications

OWASP

Risk cataloguesThreat and attack taxonomies 1 document found

international Rights unreviewed

PCI Data Security Standard

PCI SSC

Control frameworksManagement and assurance standards

international Rights unreviewed

PCI SSC Security Considerations for AI Systems

PCI SSC

Control frameworksManagement and assurance standards

international Rights unreviewed

Personal Data Privacy Protection Law

EU, US/California, Quebec, Singapore, UAE, Saudi Arabia, Qatar, Bahrain

Laws and regulations

QA Rights unreviewed

Personal Data Protection Act 2012

EU, US/California, Quebec, Singapore, UAE, Saudi Arabia, Qatar, Bahrain

Laws and regulations

SG Rights unreviewed

Personal Data Protection Law

EU, US/California, Quebec, Singapore, UAE, Saudi Arabia, Qatar, Bahrain

Laws and regulations

SA Rights unreviewed

Personal Data Protection Law

EU, US/California, Quebec, Singapore, UAE, Saudi Arabia, Qatar, Bahrain

Laws and regulations

BH Rights unreviewed

Quebec Law 25 / private-sector personal-information act

EU, US/California, Quebec, Singapore, UAE, Saudi Arabia, Qatar, Bahrain

Laws and regulations

CA Rights unreviewed

SOC 2 Trust Services Criteria

AICPA

Management and assurance standards

US Rights unreviewed

UNESCO Recommendation on the Ethics of Artificial Intelligence

UNESCO

Principles and ethical frameworks 2 documents found

varies_by_instrument Rights unreviewed

Records are provisional until independently checked against the original publisher. “Not verified” does not mean no edition exists.