III. Crosswalks
Framework crosswalks
ATR maintainers write each crosswalk. It says which rules answer which items in a framework. The framework owners have not reviewed or endorsed them, and a mapping is not evidence of compliance with any regulation.
DatesRule counts and citations inside a document stay as they were the day it was written. The table shows the date each document gives and the date of its last commit.
| Framework | Owner | Document date | Last commit |
|---|---|---|---|
| OWASP Top 10 for Agentic Applications (2026) | OWASP | 2026-10-15 | 2026-11-10 |
| OWASP Agentic Skills Top 10 | OWASP | — | 2026-11-10 |
| OWASP AIVSS | OWASP | 2026-07-12 | 2026-11-10 |
| SAF-MCP techniques | SAF-MCP | — | 2026-11-10 |
| MCP-38 threat taxonomy | MCP-38 | 2026-07-12 (corpus re-stamp to v3.5.8; cited rule IDs | 2026-11-10 |
| NSA MCP security design guidance | NSA | — | 2026-11-10 |
| Five Eyes: Careful Adoption of Agentic AI Services | Five Eyes agencies | — | 2026-11-10 |
| CSA MAESTRO | Cloud Security Alliance | 2026-08-11 | 2026-11-10 |
Internal drafts, not published
These documents call themselves unpublished internal drafts in their own header. The site lists their names and leaves the content out.
- OWASP AISVS 1.0internal draft
- OWASP Agentic AI Maturity Modelinternal draft
- MITRE ATLASinternal draft
- ETSI TS 104 223 / UK AI Cyber Security Code of Practiceinternal draft
- FINOS AI Governance Framework v2.0internal draft
Page generated 2026-11-10Something wrong or missing? Open an issue