CAF · NIST AI RMF · EU AI Act · OWASP
Disclaimer: This is GOV Assured’s own analysis. It is not an official NCSC CAF profile, DSIT assessment scheme, or OWASP product. CAF contributing outcome titles follow NCSC CAF v4.0. AI-specific indicators of good practice and the mapping to OWASP AI Exchange control IDs are analytical. OWASP publishes a mapping to the NCSC/CISA Joint Guidelines and the DSIT AI Cyber Security Code of Practice only — there is no official OWASP→CAF mapping.
Rate each contributing outcome for your AI estate. Evidence hints cite GOV Assured GA-* controls and OWASP AI Exchange #CONTROL IDs. Ratings and notes are stored in this browser only (localStorage) — nothing is sent to a server. Export CSV/JSON for your records, or print a friendly summary. B2.b and B3.d are marked inherit enterprise CAF.
Showing CAF contributing outcomes. Switch lens to highlight related GA-* catalogue mappings for NIST, the EU AI Act or OWASP.