📖

Adapting SR 11-7 (OCC) and PRA SS1/23 to LLMs and Agents - Model Risk Management 2026

reading · M1 · 15 min

Preview

📖

Agent Autonomy-Tier Control Matrix - Suggest/Confirm/Act/Autonomous

reading · M2 · 15 min

Preview

📖

Agentic-System FRIA - Autonomy Tiers, Tool Allowlists, Memory Hygiene

reading · M3 · 15 min

Preview

📖

AIA, AI Risk Assessment, FRIA - When Each Applies

reading · M4 · 15 min

Preview

📖

AIMS Documentation - The Seven Mandatory Documented Elements

reading · M5 · 15 min

Preview

📖

Annex XIII Non-FLOPs Designation - When Commission Designates GPAI With Systemic Risk Below the 10^25 Threshold

reading · M6 · 15 min

Preview

📖

Anthropic Inspect + OpenAI Evals - Capability and Safety Evaluation Pipelines

reading · M7 · 15 min

Preview

📖

Building the Annex IV Technical Documentation File

reading · M8 · 15 min

Preview

📖

CE Marking, Article 47 Declaration of Conformity, Article 71 EU Database Registration

reading · M9 · 15 min

Preview

📖

Data Poisoning, Backdoors, Model Extraction & System-Prompt Leakage - Attack Coverage (2026)

reading · M10 · 15 min

Preview

📖

Draft a FRIA for a Creditworthiness Scoring AI Under Annex III §5(b)

reading · M11 · 15 min

Preview

📖

Draft a FRIA for a High-Risk Hiring AI Under Annex III §4

reading · M12 · 15 min

Preview

📖

FRIA Notification to National Supervisory Authority

reading · M13 · 15 min

Preview

📖

FRIA Scoping - Who Must Conduct It and When (Post-Omnibus VII Timing)

reading · M14 · 15 min

Preview

📖

Independent Model Validation for Generative AI - Three-Lines Defense in 2026

reading · M15 · 15 min

Preview

📖

Internal Control vs. Notified Body - The Article 43 Decision

reading · M16 · 15 min

Preview

📖

ISO/IEC 42001 Annex A Controls - Gap Assessment

reading · M17 · 15 min

Preview

📖

ISO/IEC 23894:2023 AI Risk Management - Process Application

reading · M18 · 15 min

Preview

📖

Jailbreak Eval Library - Crescendo, TAP, PAIR, AutoDAN-Turbo, JBFuzz, X-Teaming

reading · M19 · 15 min

Preview

📖

Microsoft PyRIT Orchestrator for Multi-Turn Crescendo and TAP Attacks

reading · M20 · 15 min

Preview

📖

Model Risk Tiering, Inventory & Periodic Review Cadence: 2026 Playbook

reading · M21 · 15 min

Preview

📖

NIST AI RMF Profile Building - Sector and Use-Case Profiles

reading · M22 · 15 min

Preview

📖

Notified Body Engagement Playbook

reading · M23 · 15 min

Preview

📖

NVIDIA Garak Against an Internal LLM Endpoint

reading · M24 · 15 min

Preview

📖

OWASP Agentic Top 10 - Goal Hijack, Memory Poisoning, Tool Misuse (December 2025 Release)

reading · M25 · 15 min

Preview

📖

Prompt Injection and Indirect Prompt Injection (LLM01)

reading · M26 · 15 min

Preview

📖

Promptfoo Eval Suite for OWASP LLM Top 10 (2025) Across Production Agents

reading · M27 · 15 min

Preview

📖

Reviewing Vendor Model Cards, SOC 2 + AI, and ML-BoM - Field Guide for L3 Practitioners

reading · M28 · 15 min

Preview

📖

Stage 1 + Stage 2 ISO 42001 Audit Readiness - Schellman, A-LIGN, BSI, KPMG

reading · M29 · 15 min

Preview

📖

Substantial Modification Under Article 43(4) - Change Control Gates

reading · M30 · 15 min

Preview

📖

The Vendor AI Due-Diligence Questionnaire, 2026 Procurement Standard

reading · M31 · 15 min

Preview