ai · security · skills
Why ReskillReskillAI MaturityHermes AgentLibrarySign in
Ask Hermes →

Library / IPY

IPY

Interoperability & Portability

Domain definition — mapping in progress (source: AI Controls Matrix (AICM) Introductory Guidance).

4

Control objectives

—

Skills

—

Cross-cutting

—

Objectives fitted

AISMM maturity context

This domain has no AI Security Maturity Model (AISMM) key performance indicator (KPI) mapping — present in the AI Controls Matrix (AICM) partition but not covered by a current AISMM category.

Control objectives

The exact things this domain must do. Each carries an authoritative crosswalk to 8 external control sets (Cloud Security Alliance (CSA) AI Controls Matrix (AICM) v1.1.0). Fitted skills are drawn from the pool below as fits are evidenced.

Interoperability and Portability Policy and ProceduresIPY-01

Crosswalk

ISO/IEC 42001EU AI ActBSI AIC4CCM v4.0.13AICPA TSC 2017ISO/IEC 27001:2022NIST 800-53 rev 5NIST CSF v2.0

Implementation & auditing guidance

Shared implementation — 4 steps
Cloud Service Provider — 9 steps
Application Provider — 5 steps
Model Provider — 6 steps
Orchestrated Services Provider — 6 steps

Verbatim Cloud Security Alliance (CSA) implementation & auditing steps are available to the owner.

Fitted skill — mapping in progress. Candidates are drawn from this domain’s skill pool below.

Application Interface AvailabilityIPY-02

Crosswalk

ISO/IEC 42001EU AI ActBSI AIC4CCM v4.0.13AICPA TSC 2017ISO/IEC 27001:2022NIST 800-53 rev 5NIST CSF v2.0

Implementation & auditing guidance

Shared implementation — 4 steps
Cloud Service Provider — 6 steps
Application Provider — 4 steps
Model Provider — 4 steps
Orchestrated Services Provider — 4 steps

Verbatim Cloud Security Alliance (CSA) implementation & auditing steps are available to the owner.

Fitted skill — mapping in progress. Candidates are drawn from this domain’s skill pool below.

Secure Interoperability and Portability ManagementIPY-03

Crosswalk

ISO/IEC 42001EU AI ActBSI AIC4CCM v4.0.13AICPA TSC 2017ISO/IEC 27001:2022NIST 800-53 rev 5NIST CSF v2.0

Implementation & auditing guidance

Shared implementation — 4 steps
Cloud Service Provider — 7 steps
Application Provider — 5 steps
Model Provider — 3 steps
Orchestrated Services Provider — 4 steps

Verbatim Cloud Security Alliance (CSA) implementation & auditing steps are available to the owner.

Fitted skill — mapping in progress. Candidates are drawn from this domain’s skill pool below.

Data Portability Contractual ObligationsIPY-04

Crosswalk

ISO/IEC 42001EU AI ActBSI AIC4CCM v4.0.13AICPA TSC 2017ISO/IEC 27001:2022NIST 800-53 rev 5NIST CSF v2.0

Implementation & auditing guidance

Shared implementation — 3 steps
Cloud Service Provider — 8 steps
Application Provider — 4 steps
Model Provider — 4 steps
Orchestrated Services Provider — 4 steps

Verbatim Cloud Security Alliance (CSA) implementation & auditing steps are available to the owner.

Fitted skill — mapping in progress. Candidates are drawn from this domain’s skill pool below.

Standard names and gap levels shown; the specific clause references and full control text are available to the owner.

Skill pool — IPY

Targeted capability expansion wave

No skills assigned yet — a roadmap anchor for the next AISMM maturity wave, not a coverage gap.