ai · security · skills

Self-assessed · sample · three NIST lenses

Initech: 800-53, CSF 2.0, and AI RMF ↔ AICM

One GRA diagnostic. Foundational NIST (800-53 catalog · CSF outcomes) docks via CSA’s CCM bridge. NIST AI RMF is compared with CSA AICM — the peer AI frame for the same control spine.

One AICM function diagnostic, three NIST lenses. 800-53 and CSF gaps are CSA CCM-bridge mappings. AI RMF placement is the AICM↔AI RMF comparison lens (domain→function). Not NIST conformity.

What the delta means

Initech: foundational NIST (800-53/CSF) misses 1 AI-delta control that still aligns to AI RMF via AICM. Stack catalog → CSF → AICM↔AI RMF.

  • CSA AICM is the scored control spine. NIST AI RMF is the peer risk-management frame it is compared to (Govern / Map / Measure / Manage via domain rollup).
  • NIST SP 800-53: 16 priority absent · 24 of 26 in this slice map · matrix 188 · AI-only remainder 59.
  • NIST CSF 2.0: 16 priority absent · often Partial Gap where 800-53 is No Gap — outcomes framing grades the same bridge differently.
  • NIST AI RMF 1.0: 17 aligned-and-absent · 2 controls on this slice lack an 800-53 bridge (AI delta) · absent AI-delta: GRC-15.
  • Shared foundational win: 16 absent controls map to both 800-53 and CSF.
  • Suggested sequence: (1) absent 800-53-mapped controls, (2) CSF Partial gaps needing outcome evidence, (3) AI-delta absents under the AICM↔AI RMF function they align to.

Lens scoreboard

Foundational catalog

NIST SP 800-53 rev 5

Priority absent 16 · slice mapped 24/26 · matrix 188

Open full report →

Foundational outcomes

NIST CSF v2.0

Priority absent 16 · slice mapped 24/26 · matrix 188

Open full report →

Peer to CSA AICM

NIST AI RMF 1.0

Priority absent 17 · slice mapped 26/26 · matrix 247

Open full report →

AI RMF-only on slice

2

All three lenses

24

AI-delta absents

1

Dual 800-53+CSF absents

16

Side-by-side register

800-53 / CSF columns are CSA bridge grades. AI RMF = Aligned via AICM domain. Highlighted rows are absent or partial.

AICMPosture800-53CSFAI RMFRMF fnClassFocus
GRC-01Impl.NoPartialAlignedGovernAll threeAll three lenses: foundational NIST plus AICM↔AI RMF. One strong evidence pack serves catalog, CSF, and RMF.
GRC-02PartialNoPartialAlignedGovernAll threeTriple-mapped absent: closing practice advances 800-53, CSF outcomes, and the AICM↔AI RMF climb together.
GRC-03AbsentNoPartialAlignedGovernAll threeTriple-mapped absent: closing practice advances 800-53, CSF outcomes, and the AICM↔AI RMF climb together.
HRS-15Partialn/an/aAlignedGovernAI RMF onlyAI delta vs foundational NIST: 800-53/CSF will not clear this AICM control. Climb it under AI RMF.
GRC-15Absentn/an/aAlignedGovernAI RMF onlyAI delta vs foundational NIST: 800-53/CSF will not clear this AICM control. Climb it under AI RMF.
AIS-01PartialNoPartialAlignedMeasureAll threeTriple-mapped absent: closing practice advances 800-53, CSF outcomes, and the AICM↔AI RMF climb together.
AIS-04AbsentNoNoAlignedMeasureAll threeTriple-mapped absent: closing practice advances 800-53, CSF outcomes, and the AICM↔AI RMF climb together.
AIS-07AbsentNoNoAlignedMeasureAll threeTriple-mapped absent: closing practice advances 800-53, CSF outcomes, and the AICM↔AI RMF climb together.
TVM-01PartialNoPartialAlignedMeasureAll threeTriple-mapped absent: closing practice advances 800-53, CSF outcomes, and the AICM↔AI RMF climb together.
TVM-03AbsentNoPartialAlignedMeasureAll threeTriple-mapped absent: closing practice advances 800-53, CSF outcomes, and the AICM↔AI RMF climb together.
TVM-08AbsentNoNoAlignedMeasureAll threeTriple-mapped absent: closing practice advances 800-53, CSF outcomes, and the AICM↔AI RMF climb together.
A&A-01PartialNoPartialAlignedMeasureAll threeTriple-mapped absent: closing practice advances 800-53, CSF outcomes, and the AICM↔AI RMF climb together.
A&A-02AbsentNoPartialAlignedMeasureAll threeTriple-mapped absent: closing practice advances 800-53, CSF outcomes, and the AICM↔AI RMF climb together.
A&A-05AbsentNoPartialAlignedMeasureAll threeTriple-mapped absent: closing practice advances 800-53, CSF outcomes, and the AICM↔AI RMF climb together.
A&A-06AbsentNoPartialAlignedMeasureAll threeTriple-mapped absent: closing practice advances 800-53, CSF outcomes, and the AICM↔AI RMF climb together.
STA-01PartialPartialPartialAlignedMapAll threeTriple-mapped absent: closing practice advances 800-53, CSF outcomes, and the AICM↔AI RMF climb together.
STA-08PartialNoNoAlignedMapAll threeTriple-mapped absent: closing practice advances 800-53, CSF outcomes, and the AICM↔AI RMF climb together.
STA-10AbsentNoPartialAlignedMapAll threeTriple-mapped absent: closing practice advances 800-53, CSF outcomes, and the AICM↔AI RMF climb together.
STA-13AbsentNoNoAlignedMapAll threeTriple-mapped absent: closing practice advances 800-53, CSF outcomes, and the AICM↔AI RMF climb together.
BCR-01AbsentNoPartialAlignedManageAll threeTriple-mapped absent: closing practice advances 800-53, CSF outcomes, and the AICM↔AI RMF climb together.
BCR-02AbsentNoPartialAlignedManageAll threeTriple-mapped absent: closing practice advances 800-53, CSF outcomes, and the AICM↔AI RMF climb together.
BCR-08PartialNoNoAlignedManageAll threeTriple-mapped absent: closing practice advances 800-53, CSF outcomes, and the AICM↔AI RMF climb together.
BCR-06AbsentNoPartialAlignedManageAll threeTriple-mapped absent: closing practice advances 800-53, CSF outcomes, and the AICM↔AI RMF climb together.
IPY-01AbsentNoPartialAlignedMapAll threeTriple-mapped absent: closing practice advances 800-53, CSF outcomes, and the AICM↔AI RMF climb together.
IPY-03AbsentNoPartialAlignedMapAll threeTriple-mapped absent: closing practice advances 800-53, CSF outcomes, and the AICM↔AI RMF climb together.
IPY-04AbsentPartialPartialAlignedMapAll threeTriple-mapped absent: closing practice advances 800-53, CSF outcomes, and the AICM↔AI RMF climb together.