Crosswalk

One control. Four frameworks. Four vocabularies.

44 CONTROL ROWS · 10 OFFICIAL MAPPINGS · 99 GAGE ANALYSIS

The short answer

You implement a control once. Then you evidence it against NIST AI RMF for one counterparty, ISO/IEC 42001 for a certification body, and a national framework for a regulator. These tables line those documents up row by row. Cells marked GAGE analysis are our reading of an alignment, not a mapping any agency published.

Singapore: 36 control rows

Control	Model AI Governance Framework	ISO/IEC 42001	NIST AI RMF	EU AI Act
Organisational context & governance structures	Area 1: Internal Governance Structures and Measures GuidanceGAGE analysis	Clause 4: Context of the organization StandardGAGE analysis	Function: GOVERN GuidanceGAGE analysis	No equivalent
Leadership accountability & quality management	Area 1: Internal Governance Structures and Measures GuidanceGAGE analysis	Clause 5: Leadership StandardGAGE analysis	Function: GOVERN GuidanceGAGE analysis	Article 17: Quality management system BindingGAGE analysis
AI literacy & staff competency	Area 1: Internal Governance Structures and Measures GuidanceGAGE analysis	Clause 7: Support StandardGAGE analysis	No equivalent	Article 4: AI literacy BindingGAGE analysis
Human oversight	Area 2: Determining the Level of Human Involvement in AI-augmented Decision-making GuidanceGAGE analysis	Clause 8: Operation StandardGAGE analysis	Function: GOVERN GuidanceGAGE analysis	Article 14: Human oversight BindingGAGE analysis
Risk management system	Area 3: Operations Management GuidanceGAGE analysis	Clause 6: Planning StandardGAGE analysis	Function: MANAGE GuidanceGAGE analysis	Article 9: Risk management system BindingGAGE analysis
Logging & record-keeping	Area 3: Operations Management GuidanceGAGE analysis	Clause 7: Support StandardGAGE analysis	Function: MEASURE GuidanceGAGE analysis	Article 12: Record-keeping BindingGAGE analysis
Post-market / post-deployment monitoring	Area 3: Operations Management GuidanceGAGE analysis	Clause 9: Performance evaluation StandardGAGE analysis	Function: MANAGE GuidanceGAGE analysis	Article 72: Post-market monitoring BindingGAGE analysis
Performance evaluation & audit	Area 3: Operations Management GuidanceGAGE analysis	Clause 9: Performance evaluation StandardGAGE analysis	Function: MEASURE GuidanceGAGE analysis	No equivalent
Transparency & deployer information	Area 4: Stakeholder Interaction and Communication GuidanceGAGE analysis	Clause 7: Support StandardGAGE analysis	Function: GOVERN GuidanceGAGE analysis	Article 26: Obligations of deployers BindingGAGE analysis
Risk context mapping	Area 2: Determining the Level of Human Involvement in AI-augmented Decision-making GuidanceGAGE analysis	No equivalent	Function: MAP GuidanceGAGE analysis	No equivalent
Continual improvement	Model AI Governance Framework, 2nd Edition (2020) GuidanceGAGE analysis	Clause 10: Improvement StandardGAGE analysis	No equivalent	No equivalent
Risk & opportunity planning	Model AI Governance Framework, 2nd Edition (2020) GuidanceGAGE analysis	Clause 6: Planning StandardGAGE analysis	No equivalent	No equivalent
Data governance	No equivalent	Clause 8: Operation StandardGAGE analysis	Function: MAP GuidanceGAGE analysis	Article 10: Data and data governance BindingGAGE analysis
Data disposal & end-of-life	No equivalent	Clause 8: Operation StandardGAGE analysis	Function: MANAGE GuidanceGAGE analysis	Article 10: Data and data governance BindingGAGE analysis
Accuracy, robustness & cybersecurity	No equivalent	No equivalent	Function: MANAGE GuidanceGAGE analysis	Article 15: Accuracy, robustness and cybersecurity BindingGAGE analysis
Threat modelling & risk identification	No equivalent	No equivalent	Function: MAP GuidanceGAGE analysis	Article 15: Accuracy, robustness and cybersecurity BindingGAGE analysis
Incident reporting & management	No equivalent	Clause 9: Performance evaluation StandardGAGE analysis	No equivalent	Article 72: Post-market monitoring BindingGAGE analysis
Vulnerability disclosure	No equivalent	No equivalent	Function: MANAGE GuidanceGAGE analysis	No equivalent
Secure development lifecycle	No equivalent	Clause 6: Planning StandardGAGE analysis	Function: MANAGE GuidanceGAGE analysis	Article 15: Accuracy, robustness and cybersecurity BindingGAGE analysis
Supply-chain & third-party security	No equivalent	No equivalent	Function: MAP GuidanceGAGE analysis	No equivalent
Testing & assurance	No equivalent	No equivalent	Function: MEASURE GuidanceGAGE analysis	No equivalent
Fairness & equity	No equivalent	No equivalent	Function: MEASURE GuidanceGAGE analysis	No equivalent
Privacy & data protection governance	No equivalent	No equivalent	Function: MAP GuidanceGAGE analysis	Article 10: Data and data governance BindingGAGE analysis
Human-centricity	No equivalent	No equivalent	Function: GOVERN GuidanceGAGE analysis	Article 14: Human oversight BindingGAGE analysis
Accountability & integrity	No equivalent	Clause 5: Leadership StandardGAGE analysis	No equivalent	Article 17: Quality management system BindingGAGE analysis
Security & safety	No equivalent	No equivalent	Function: MANAGE GuidanceGAGE analysis	Article 15: Accuracy, robustness and cybersecurity BindingGAGE analysis
High-risk system conformity	No equivalent	Clause 8: Operation StandardGAGE analysis	No equivalent	Article 17: Quality management system BindingGAGE analysis
Risk-tier classification	No equivalent	No equivalent	No equivalent	Article 6 + Annex III: High-risk AI systems BindingGAGE analysis
Transparency & labelling of AI content	No equivalent	No equivalent	No equivalent	Article 26: Obligations of deployers BindingGAGE analysis
Content provenance	No equivalent	No equivalent	Note: NIST AI 600-1 Generative AI Profile (July 2024) GuidanceGAGE analysis	No equivalent
Safety & alignment R&D	No equivalent	No equivalent	Note: NIST AI 600-1 Generative AI Profile (July 2024) GuidanceGAGE analysis	No equivalent
Framework-level GenAI risk management	No equivalent	Clause 8: Operation StandardGAGE analysis	Function: MEASURE GuidanceGAGE analysis	Article 15: Accuracy, robustness and cybersecurity BindingGAGE analysis
Official crosswalk: AI Verify to NIST AI RMF	No equivalent	No equivalent	NIST AI Risk Management Framework 1.0 (extern crosswalk target) GuidanceOfficial	No equivalent
Official crosswalk: AI Verify to ISO/IEC 42001	No equivalent	ISO/IEC 42001:2023 - AI management system (extern crosswalk target) StandardOfficial	No equivalent	No equivalent
Board & senior-management AI oversight	No equivalent	Clause 5: Leadership StandardGAGE analysis	Function: GOVERN GuidanceGAGE analysis	No equivalent
Self-assessment & conformance	No equivalent	Clause 9: Performance evaluation StandardGAGE analysis	Function: MEASURE GuidanceGAGE analysis	No equivalent

United States: 8 control rows

Control	NIST AI RMF	US federal layer	Singapore stack	ISO/IEC 42001
Governance structure and accountability	Govern: an AI RMF core function GuidanceOfficial	Every agency identifies a Chief AI Officer Binding, sectoralGAGE analysis	Area 1: Internal Governance Structures and Measures GuidanceGAGE analysis	Clause 5: Leadership StandardGAGE analysis
Identifying context, purpose and affected people	Map: an AI RMF core function GuidanceOfficial	Minimum risk management practices for high impact AI Binding, sectoralGAGE analysis	Area 3: Operations Management GuidanceGAGE analysis	Clause 6: Planning StandardGAGE analysis
Testing, metrics and monitoring	Measure: an AI RMF core function GuidanceOfficial	Track performance and manage risk Binding, sectoralGAGE analysis	AI Verify Testing Framework and Toolkit GuidanceGAGE analysis	Clause 9: Performance evaluation StandardGAGE analysis
Treating risk, and stopping when you cannot	Manage: an AI RMF core function GuidanceOfficial	Minimum risk management practices for high impact AI Binding, sectoralGAGE analysis	Area 2: Determining the Level of Human Involvement in AI-augmented Decision-making GuidanceGAGE analysis	Clause 8: Operation StandardGAGE analysis
Telling people an AI was involved	FDA draft guidance: AI enabled device software functions ConsultationOfficial	48 hour removal duty for covered platforms BindingGAGE analysis	Area 4: Stakeholder Interaction and Communication GuidanceGAGE analysis	No equivalent
Explaining an adverse decision	Equal Credit Opportunity Act and Regulation B BindingOfficial	The Uniform Guidelines on Employee Selection Procedures BindingGAGE analysis	Notification Obligation (s 20) BindingGAGE analysis	No equivalent
Securing the AI system itself	CISA guidance on securing AI systems GuidanceOfficial	Section 2(d): the AI cybersecurity clearinghouse Binding, sectoralGAGE analysis	CSA Guidelines and Companion Guide on Securing AI Systems GuidanceGAGE analysis	No equivalent
Agentic AI and autonomy	The AI Agent Standards Initiative GuidanceOfficial	Section 3: covered frontier models Binding, sectoralGAGE analysis	Model AI Governance Framework for Agentic AI GuidanceGAGE analysis	No equivalent

A warning about crosswalks

A crosswalk tells you where to look. It does not tell you that satisfying one framework satisfies another, and no cell on this page claims that. Two entries can address the same subject and impose different duties, at different levels of legal force, on different people. Read the force badge on every cell before you rely on the row.

How these mappings were made