https://aiassurancedirectory.com/articles/Source-cited articles from AI Assurance Directory. Every factual claim links to a public source.enFri, 16 Oct 2026 00:00:00 GMThttps://aiassurancedirectory.com/articles/cisa-joint-principles-secure-integration-of-ai-in-operational-technology/https://aiassurancedirectory.com/articles/cisa-joint-principles-secure-integration-of-ai-in-operational-technology/Fri, 16 Oct 2026 00:00:00 GMTThe four principles in the December 2025 CISA, ASD ACSC and partner guidance on AI in OT, with the vendor-transparency, testing and failsafe passages that matter to buyers.https://aiassurancedirectory.com/articles/eu-ai-act-article-4-ai-literacy/https://aiassurancedirectory.com/articles/eu-ai-act-article-4-ai-literacy/Fri, 16 Oct 2026 00:00:00 GMTWhat Article 4 asks of providers and deployers after the 2026 AI Omnibus, per the Commission's Q&A and the Service Desk text. No certificate or specific training is mandated.https://aiassurancedirectory.com/articles/eu-ai-act-article-6-high-risk-classification-safety-components/https://aiassurancedirectory.com/articles/eu-ai-act-article-6-high-risk-classification-safety-components/Fri, 16 Oct 2026 00:00:00 GMTHow Article 6 sorts AI systems into high-risk, including the 2026 Omnibus paragraphs on safety components and the Article 6(3) documented-assessment route for Annex III.https://aiassurancedirectory.com/articles/eu-ai-act-articles-14-and-26-human-oversight-provider-and-deployer-duties/https://aiassurancedirectory.com/articles/eu-ai-act-articles-14-and-26-human-oversight-provider-and-deployer-duties/Fri, 16 Oct 2026 00:00:00 GMTArticle 14 makes providers design high-risk AI for human oversight, including a stop control; Article 26 makes deployers assign competent people and keep logs. Quoted from the Service Desk text.https://aiassurancedirectory.com/articles/eu-ai-act-articles-9-and-15-risk-management-accuracy-robustness-cybersecurity/https://aiassurancedirectory.com/articles/eu-ai-act-articles-9-and-15-risk-management-accuracy-robustness-cybersecurity/Fri, 16 Oct 2026 00:00:00 GMTWhat Articles 9 and 15 of the AI Act require of high-risk systems, quoted from the Service Desk text: lifecycle risk management, declared accuracy, fail-safe robustness and poisoning defenses.https://aiassurancedirectory.com/articles/mitre-atlas-for-ai-red-teaming/https://aiassurancedirectory.com/articles/mitre-atlas-for-ai-red-teaming/Fri, 16 Oct 2026 00:00:00 GMTWhat the public MITRE ATLAS data release contains, how a red team can use its IDs and mitigations in a test plan, and what it does not certify.https://aiassurancedirectory.com/articles/nist-ai-rmf-playbook-measure-and-manage-suggested-actions-for-safety-critical-ai/https://aiassurancedirectory.com/articles/nist-ai-rmf-playbook-measure-and-manage-suggested-actions-for-safety-critical-ai/Fri, 16 Oct 2026 00:00:00 GMTWhat the NIST AI RMF Playbook is and which Measure 2.5, 2.6 and Manage 2.4 suggested actions map to validation, fail-safe testing and bypass plans on a safety-critical program.https://aiassurancedirectory.com/articles/nist-cyber-ai-profile-ir-8596-preliminary-draft/https://aiassurancedirectory.com/articles/nist-cyber-ai-profile-ir-8596-preliminary-draft/Fri, 16 Oct 2026 00:00:00 GMTNIST IR 8596 is a preliminary-draft CSF 2.0 profile for AI cybersecurity with Secure, Defend and Thwart focus areas. What the NIST page says, its draft status, and what to ask suppliers.https://aiassurancedirectory.com/articles/nist-sp-800-53-cosais-control-overlays-for-securing-ai-systems/https://aiassurancedirectory.com/articles/nist-sp-800-53-cosais-control-overlays-for-securing-ai-systems/Fri, 16 Oct 2026 00:00:00 GMTNIST's COSAiS project is building SP 800-53 overlays for generative AI, predictive AI, single- and multi-agent AI, and AI developers. What the project pages say, and what to ask for meanwhile.https://aiassurancedirectory.com/articles/owasp-top-10-for-llm-applications-2025-buyer-questions/https://aiassurancedirectory.com/articles/owasp-top-10-for-llm-applications-2025-buyer-questions/Fri, 16 Oct 2026 00:00:00 GMTHow five entries of the OWASP 2025 LLM Top 10 (prompt injection, supply chain, poisoning, output handling, excessive agency) turn into vendor questions, using OWASP's own mitigation text.https://aiassurancedirectory.com/articles/ai-act-annex-i-section-b-motor-vehicles-ai/https://aiassurancedirectory.com/articles/ai-act-annex-i-section-b-motor-vehicles-ai/Thu, 15 Oct 2026 00:00:00 GMTWhat the Commission AI Act Service Desk pages say about motor-vehicle regulations in Annex I Section B and which AI Act provisions Article 2(2) applies to them.https://aiassurancedirectory.com/articles/arp4754b-fdal-idal-for-ml-functions/https://aiassurancedirectory.com/articles/arp4754b-fdal-idal-for-ml-functions/Thu, 15 Oct 2026 00:00:00 GMTHow FAA AC 20-174 treats FDAL and IDAL, what EASA Issue 2 says about IDAL A/B ML constituents, and why ARP4754B is not an AI certificate.https://aiassurancedirectory.com/articles/automotive-ai-iso-26262-pas-8800-ul-4600/https://aiassurancedirectory.com/articles/automotive-ai-iso-26262-pas-8800-ul-4600/Thu, 15 Oct 2026 00:00:00 GMTWhat official ISO and UL catalog pages say about functional safety, AI in road vehicles, and autonomous-product safety cases — and what they do not say.https://aiassurancedirectory.com/articles/automotive-ai-tool-claims-versus-vehicle-level-claims/https://aiassurancedirectory.com/articles/automotive-ai-tool-claims-versus-vehicle-level-claims/Thu, 15 Oct 2026 00:00:00 GMTHow the cited vendor pages for automotive tools name ISO 26262 and ISO/PAS 8800, and why a tool claim is not a vehicle claim (editorial judgment).https://aiassurancedirectory.com/articles/automotive-ml-component-what-evidence-will-an-assessor-expect/https://aiassurancedirectory.com/articles/automotive-ml-component-what-evidence-will-an-assessor-expect/Thu, 15 Oct 2026 00:00:00 GMTWhat the public ISO, UL and EU pages say about evidence for a machine-learning component in a road vehicle, and where they stop. Editorial judgment is labeled.https://aiassurancedirectory.com/articles/cdao-rai-toolkit-vs-tradewinds-aia/https://aiassurancedirectory.com/articles/cdao-rai-toolkit-vs-tradewinds-aia/Thu, 15 Oct 2026 00:00:00 GMTWhy the 2023 RAI Toolkit and the live Tradewinds AIA Toolkit are the same public self-evaluation resource, plus the December 2024 generative-AI companion PDF.https://aiassurancedirectory.com/articles/choosing-ai-red-teaming-tools-for-safety-critical-programs/https://aiassurancedirectory.com/articles/choosing-ai-red-teaming-tools-for-safety-critical-programs/Thu, 15 Oct 2026 00:00:00 GMTHow official CDAO, NIST and DoD pages define AI red-teaming, which listed tools name those uses, and what no page makes a contract clause.https://aiassurancedirectory.com/articles/cmmc-and-ai-tools-handling-cui/https://aiassurancedirectory.com/articles/cmmc-and-ai-tools-handling-cui/Thu, 15 Oct 2026 00:00:00 GMTWhat 32 CFR Part 170 and DFARS 252.204-7021 actually require when an AI tool processes CUI, and why there is no AI-specific CMMC clause.https://aiassurancedirectory.com/articles/do-200b-aeronautical-data-vs-ml-training-sets/https://aiassurancedirectory.com/articles/do-200b-aeronautical-data-vs-ml-training-sets/Thu, 15 Oct 2026 00:00:00 GMTWhat FAA AC 20-153B treats as aeronautical data, why DO-200B is not EASA learning assurance, and what a program may still need both packages for.https://aiassurancedirectory.com/articles/dod-3000-09-compliance-checklist-for-autonomy-vendors/https://aiassurancedirectory.com/articles/dod-3000-09-compliance-checklist-for-autonomy-vendors/Thu, 15 Oct 2026 00:00:00 GMTA vendor-facing checklist from DoD Directive 3000.09: scope, human judgment, V&V and T&E, senior review, and what the directive excludes.https://aiassurancedirectory.com/articles/dod-rai-implementation-pathway-for-industry/https://aiassurancedirectory.com/articles/dod-rai-implementation-pathway-for-industry/Thu, 15 Oct 2026 00:00:00 GMTWhat CDAO’s public pages say the June 2022 RAI Strategy and Implementation Pathway is, how the toolkit implements it, and what is not a contractor certificate.https://aiassurancedirectory.com/articles/easa-ai-concept-paper-issue-2-for-suppliers/https://aiassurancedirectory.com/articles/easa-ai-concept-paper-issue-2-for-suppliers/Thu, 15 Oct 2026 00:00:00 GMTWhat Issue 2 asks a supplier to show for Level 1 and Level 2 ML: ODD, independent data sets, learning assurance, and why it is not an AMC.https://aiassurancedirectory.com/articles/fda-ai-enabled-device-list-what-it-is-and-is-not/https://aiassurancedirectory.com/articles/fda-ai-enabled-device-list-what-it-is-and-is-not/Thu, 15 Oct 2026 00:00:00 GMTWhat FDA’s AI-enabled device list page says about its purpose and its limits, and how a buyer or supplier should and should not use it (editorial note labeled).https://aiassurancedirectory.com/articles/fda-good-machine-learning-practice-guiding-principles/https://aiassurancedirectory.com/articles/fda-good-machine-learning-practice-guiding-principles/Thu, 15 Oct 2026 00:00:00 GMTWhat FDA’s Good Machine Learning Practice guiding-principles page says about the IMDRF document, and how it sits beside the PCCP guidance (editorial note labeled).https://aiassurancedirectory.com/articles/how-to-qualify-an-ml-tool-under-do-330/https://aiassurancedirectory.com/articles/how-to-qualify-an-ml-tool-under-do-330/Thu, 15 Oct 2026 00:00:00 GMTA buyer-side walkthrough of the DO-178C 12.2 decision, TQL-5 versus TQL-1, and what no public table assigns to training or robustness tools.https://aiassurancedirectory.com/articles/iec-61508-3-software-requirements-and-learned-components/https://aiassurancedirectory.com/articles/iec-61508-3-software-requirements-and-learned-components/Thu, 15 Oct 2026 00:00:00 GMTOfficial catalog scope statements for IEC 61508-3:2010 and ISO/IEC TR 5469:2024, with a labeled editorial reading for machinery and process buyers.https://aiassurancedirectory.com/articles/iec-61511-process-sis-and-ai/https://aiassurancedirectory.com/articles/iec-61511-process-sis-and-ai/Thu, 15 Oct 2026 00:00:00 GMTOfficial IEC catalog pages for safety instrumented systems in the process sector, and what they do not say about machine learning.https://aiassurancedirectory.com/articles/iec-61511-sis-lifecycle-questions-for-ai-in-process-plants/https://aiassurancedirectory.com/articles/iec-61511-sis-lifecycle-questions-for-ai-in-process-plants/Thu, 15 Oct 2026 00:00:00 GMTIEC 61511-1:2016 and its 2017 consolidated version as catalogued by IEC, and an editorial question list for AI tools near a safety instrumented system.https://aiassurancedirectory.com/articles/iec-62304-and-fda-pccp-change-control-for-ai-software/https://aiassurancedirectory.com/articles/iec-62304-and-fda-pccp-change-control-for-ai-software/Thu, 15 Oct 2026 00:00:00 GMTIEC 62304 and its 2015 amendment next to the FDA PCCP guidance: what each official page says, and an editorial comparison of what a change-control record must answer.https://aiassurancedirectory.com/articles/industrial-machinery-ml-what-evidence-will-a-notified-body-expect/https://aiassurancedirectory.com/articles/industrial-machinery-ml-what-evidence-will-a-notified-body-expect/Thu, 15 Oct 2026 00:00:00 GMTWhat IEC and AI Act Service Desk pages say about software evidence and learned components in machinery safety functions, and where public text stops. Editorial judgment is labeled.https://aiassurancedirectory.com/articles/iso-10218-scope-exclusions-for-ai-robot-buyers/https://aiassurancedirectory.com/articles/iso-10218-scope-exclusions-for-ai-robot-buyers/Thu, 15 Oct 2026 00:00:00 GMTWhat the ISO catalog says ISO 10218-1:2025 covers and excludes, how it relates to Regulation (EU) 2023/1230, and an editorial buyer checklist.https://aiassurancedirectory.com/articles/iso-42001-nist-ai-100-1-source-documents-and-crosswalk-caveats/https://aiassurancedirectory.com/articles/iso-42001-nist-ai-100-1-source-documents-and-crosswalk-caveats/Thu, 15 Oct 2026 00:00:00 GMTExact titles, what each document is, and the caveats NIST and the crosswalk itself state, before you rely on any clause-to-subcategory row.https://aiassurancedirectory.com/articles/iso-42001-vs-nist-ai-rmf-for-defense-contractors/https://aiassurancedirectory.com/articles/iso-42001-vs-nist-ai-rmf-for-defense-contractors/Thu, 15 Oct 2026 00:00:00 GMTWhat a DIB team should take from the certifiable AIMS versus the voluntary RMF, using NIST’s published crosswalk and DoD’s own statement that the RAI toolkit builds on the RMF.https://aiassurancedirectory.com/articles/iso-pas-8800-and-iso-26262-reading-the-scope-lines/https://aiassurancedirectory.com/articles/iso-pas-8800-and-iso-26262-reading-the-scope-lines/Thu, 15 Oct 2026 00:00:00 GMTSide-by-side reading of the ISO catalog scope statements for ISO 26262-1:2018 and ISO/PAS 8800:2024, with a labeled editorial note on supplier questions.https://aiassurancedirectory.com/articles/machinery-regulation-2023-1230-iso-10218-iec-61508/https://aiassurancedirectory.com/articles/machinery-regulation-2023-1230-iso-10218-iec-61508/Thu, 15 Oct 2026 00:00:00 GMTOfficial EUR-Lex, ISO and IEC pages for machinery AI provisions, industrial-robot safety and the parent functional-safety publication.https://aiassurancedirectory.com/articles/machinery-regulation-ai-act-annex-i-section-b-item-21/https://aiassurancedirectory.com/articles/machinery-regulation-ai-act-annex-i-section-b-item-21/Thu, 15 Oct 2026 00:00:00 GMTThe Commission AI Act Service Desk lists Regulation (EU) 2023/1230 in Annex I Section B; Article 2(2) limits which AI Act provisions apply to such products.https://aiassurancedirectory.com/articles/medical-device-ai-fda-pccp-iec-62304-mdr/https://aiassurancedirectory.com/articles/medical-device-ai-fda-pccp-iec-62304-mdr/Thu, 15 Oct 2026 00:00:00 GMTOfficial FDA, IEC and EUR-Lex pages for AI-enabled device software, software life-cycle processes, and MDR as AI Act Annex I item 11.https://aiassurancedirectory.com/articles/medical-device-ml-what-evidence-does-fda-expect-in-a-submission/https://aiassurancedirectory.com/articles/medical-device-ml-what-evidence-does-fda-expect-in-a-submission/Thu, 15 Oct 2026 00:00:00 GMTWhat FDA’s January 2025 draft AI-enabled device software functions guidance and its PCCP guidance say a submission should contain, from the sections we read. Editorial judgment is labeled.https://aiassurancedirectory.com/articles/nasa-swehb-super-intelligence-topics-flight-software/https://aiassurancedirectory.com/articles/nasa-swehb-super-intelligence-topics-flight-software/Thu, 15 Oct 2026 00:00:00 GMTWhat SWEHB 7.25 and 8.25 tell NASA AI/ML projects about NPR 7150.2 and safety-critical limits. Official titles stay Artificial Intelligence. Handbook topics, not a certificate.https://aiassurancedirectory.com/articles/nist-ai-100-2-adversarial-ml-defense-te/https://aiassurancedirectory.com/articles/nist-ai-100-2-adversarial-ml-defense-te/Thu, 15 Oct 2026 00:00:00 GMTWhat NIST AI 100-2e2025’s adversarial-machine-learning taxonomy is, how it sits next to CDAO T&E and ATLAS, and what it does not certify.https://aiassurancedirectory.com/articles/nist-sp-800-218a-ssdf-generative-ai-defense/https://aiassurancedirectory.com/articles/nist-sp-800-218a-ssdf-generative-ai-defense/Thu, 15 Oct 2026 00:00:00 GMTWhat the July 2024 SSDF Community Profile adds for generative and dual-use models, how it sits next to CMMC and the AI RMF, and what it does not certify.https://aiassurancedirectory.com/articles/process-industries-ml-what-evidence-will-an-assessor-expect/https://aiassurancedirectory.com/articles/process-industries-ml-what-evidence-will-an-assessor-expect/Thu, 15 Oct 2026 00:00:00 GMTWhat the IEC catalog says about IEC 61511-1, IEC 61508-3 and ISO/IEC TR 5469 for an ML component near a safety instrumented system. Editorial judgment is labeled.https://aiassurancedirectory.com/articles/process-sis-vendor-pages-iec-61511-named-versus-implied/https://aiassurancedirectory.com/articles/process-sis-vendor-pages-iec-61511-named-versus-implied/Thu, 15 Oct 2026 00:00:00 GMTHow four process-safety vendor pages word their standards claims, read against the IEC catalog scope of IEC 61511-1 and IEC 61508-1 (editorial reading labeled).https://aiassurancedirectory.com/articles/prompt-guardrails-vs-airborne-runtime-assurance/https://aiassurancedirectory.com/articles/prompt-guardrails-vs-airborne-runtime-assurance/Thu, 15 Oct 2026 00:00:00 GMTWhy cloud LLM input/output rails are not NASA/ASTM runtime assurance, using the cited NeMo, Bedrock, Azure and NASA TM pages.https://aiassurancedirectory.com/articles/using-the-iso-42001-nist-ai-rmf-crosswalk-for-supplier-evidence-requests/https://aiassurancedirectory.com/articles/using-the-iso-42001-nist-ai-rmf-crosswalk-for-supplier-evidence-requests/Thu, 15 Oct 2026 00:00:00 GMTHow a buyer can use the rows NIST published to decide what documents to ask an AI supplier for, with the editorial steps clearly separated from the sourced mappings.https://aiassurancedirectory.com/articles/ai-assurance-glossary-aerospace-defense/https://aiassurancedirectory.com/articles/ai-assurance-glossary-aerospace-defense/Wed, 14 Oct 2026 00:00:00 GMTOfficial meanings of the terms that show up in FAA, EASA, NIST, DoD and CMMC AI work, each tied to the source that uses it.https://aiassurancedirectory.com/articles/ai-audit-evidence-checklist/https://aiassurancedirectory.com/articles/ai-audit-evidence-checklist/Wed, 14 Oct 2026 00:00:00 GMTA checklist of evidence artifacts for AI audits, each tied to the ISO/IEC 42001, NIST AI RMF, EU AI Act, EASA, NIST SP 800-171 or DoD source that expects it.https://aiassurancedirectory.com/articles/ai-in-mro-predictive-maintenance-faa-easa/https://aiassurancedirectory.com/articles/ai-in-mro-predictive-maintenance-faa-easa/Wed, 14 Oct 2026 00:00:00 GMTFAA Roadmap maintenance and retirement sentences, AC 43-218 IAHM with no AI words found, and EASA-hosted ForMuLA research — not an MRO AI regulation.https://aiassurancedirectory.com/articles/ai-incident-reporting-eu-ai-act-article-73-vs-dod/https://aiassurancedirectory.com/articles/ai-incident-reporting-eu-ai-act-article-73-vs-dod/Wed, 14 Oct 2026 00:00:00 GMTArticle 73 sets timed serious-incident reports for high-risk AI. Public DoD pages describe RAI repositories and existing processes, not an Article 73 equivalent.https://aiassurancedirectory.com/articles/ai-red-teaming-requirements-for-defense-programs/https://aiassurancedirectory.com/articles/ai-red-teaming-requirements-for-defense-programs/Wed, 14 Oct 2026 00:00:00 GMTWhat official DoD, CDAO and NIST pages actually say about AI red-teaming, and what they do not make a contract clause.https://aiassurancedirectory.com/articles/army-navy-air-force-ai-acquisition-policies/https://aiassurancedirectory.com/articles/army-navy-air-force-ai-acquisition-policies/Wed, 14 Oct 2026 00:00:00 GMTWhat Army Project Linchpin, the Navy Strategy to Weaponize Data and Artificial Intelligence, and the DAF Artificial Intelligence Strategy actually say about buying and fielding AI.https://aiassurancedirectory.com/articles/australia-defence-responsible-use-of-ai/https://aiassurancedirectory.com/articles/australia-defence-responsible-use-of-ai/Wed, 14 Oct 2026 00:00:00 GMTWhat Australia's Policy Settings for Responsible Use of Artificial Intelligence in Defence publish as lawfulness, values-based principles and proportionate controls, versus DST's research method.https://aiassurancedirectory.com/articles/autonomy-and-dod-directive-3000-09-explained/https://aiassurancedirectory.com/articles/autonomy-and-dod-directive-3000-09-explained/Wed, 14 Oct 2026 00:00:00 GMTWhat DoD Directive 3000.09 (25 January 2023) actually covers: weapon-system autonomy, human judgment, senior review, and what it excludes.https://aiassurancedirectory.com/articles/building-an-ai-assurance-case-gsn-amlas/https://aiassurancedirectory.com/articles/building-an-ai-assurance-case-gsn-amlas/Wed, 14 Oct 2026 00:00:00 GMTWhat the GSN Community Standard and AMLAS actually specify, and why neither is a published FAA or EASA means of compliance.https://aiassurancedirectory.com/articles/canada-dnd-caf-artificial-intelligence-strategy/https://aiassurancedirectory.com/articles/canada-dnd-caf-artificial-intelligence-strategy/Wed, 14 Oct 2026 00:00:00 GMTWhat the 2024 Department of National Defence and Canadian Armed Forces Artificial Intelligence Strategy publishes as its 2030 vision, five lines of effort, and procurement tasks.https://aiassurancedirectory.com/articles/cdao-test-and-evaluation-ai-systems/https://aiassurancedirectory.com/articles/cdao-test-and-evaluation-ai-systems/Wed, 14 Oct 2026 00:00:00 GMTCDAO Test and Evaluation of Artificial Intelligence Models Framework: four T&E focus areas, what the April 2024 document says it is not, and how JATIC software fits.https://aiassurancedirectory.com/articles/cmmc-and-ai-with-cui/https://aiassurancedirectory.com/articles/cmmc-and-ai-with-cui/Wed, 14 Oct 2026 00:00:00 GMTHow CMMC and NIST SP 800-171 apply when an AI system, including a cloud AI service, handles controlled unclassified information, and where the rules are silent.https://aiassurancedirectory.com/articles/cmmc-level-2-vs-level-3-for-ai/https://aiassurancedirectory.com/articles/cmmc-level-2-vs-level-3-for-ai/Wed, 14 Oct 2026 00:00:00 GMTWhat 32 CFR Part 170 actually requires at CMMC Level 2 and Level 3 when an AI system handles CUI, and what the Phase 2 suspension changes.https://aiassurancedirectory.com/articles/cmmc-program-scoping-generative-ai-cui/https://aiassurancedirectory.com/articles/cmmc-program-scoping-generative-ai-cui/Wed, 14 Oct 2026 00:00:00 GMTWhat 32 CFR Part 170 actually calls the program, including the live CMMC 2.0 resource page, and how Level 2 asset categories apply to generative components.https://aiassurancedirectory.com/articles/data-assurance-ml-avionics-easa-learning-assurance/https://aiassurancedirectory.com/articles/data-assurance-ml-avionics-easa-learning-assurance/Wed, 14 Oct 2026 00:00:00 GMTWhat EASA Issue 2 and the MLEAP research project say about data quality, the ODD, and the three data sets in the W-shaped process.https://aiassurancedirectory.com/articles/data-provenance-and-supply-chain-security-for-ml-models-sbom-aibom/https://aiassurancedirectory.com/articles/data-provenance-and-supply-chain-security-for-ml-models-sbom-aibom/Wed, 14 Oct 2026 00:00:00 GMTWhat CISA, NIST and NTIA actually say about SBOMs for AI software, and how CycloneDX ML-BOM and SPDX AI profiles relate, without inventing a mandate.https://aiassurancedirectory.com/articles/dfars-far-flowdown-ai-si-defense-contracts/https://aiassurancedirectory.com/articles/dfars-far-flowdown-ai-si-defense-contracts/Wed, 14 Oct 2026 00:00:00 GMTNo DFARS or FAR clause titled AI or Super Intelligence. What 252.204-7012, 7020, 7021 and FAR 52.204-21 actually require primes to flow down.https://aiassurancedirectory.com/articles/do-178c-and-machine-learning-gaps/https://aiassurancedirectory.com/articles/do-178c-and-machine-learning-gaps/Wed, 14 Oct 2026 00:00:00 GMTWhere requirements-based airborne software assurance strains under data-driven machine learning, and what EASA, the FAA and SAE G-34 are doing about each gap.https://aiassurancedirectory.com/articles/do-330-tool-qualification-ml-toolchains/https://aiassurancedirectory.com/articles/do-330-tool-qualification-ml-toolchains/Wed, 14 Oct 2026 00:00:00 GMTWhen an ML training or verification program is a DO-330 tool. FTP1055 criteria, TQL-5 versus TQL-1, FAA Order 8110.49A, and what no public table assigns.https://aiassurancedirectory.com/articles/dod-rai-toolkit-vs-nist-ai-rmf/https://aiassurancedirectory.com/articles/dod-rai-toolkit-vs-nist-ai-rmf/Wed, 14 Oct 2026 00:00:00 GMTWhat the DoD RAI Toolkit and the NIST AI RMF each say about themselves, and the official statement that the toolkit builds on the RMF.https://aiassurancedirectory.com/articles/does-the-faa-certify-ai-today/https://aiassurancedirectory.com/articles/does-the-faa-certify-ai-today/Wed, 14 Oct 2026 00:00:00 GMTThe FAA still has no published AI-specific certification standard. What Version I of the roadmap, the STEP discipline page, and the 2026 Small Airplane Issues List actually say.https://aiassurancedirectory.com/articles/easa-ai-concept-paper-levels-explained/https://aiassurancedirectory.com/articles/easa-ai-concept-paper-levels-explained/Wed, 14 Oct 2026 00:00:00 GMTWhat EASA Issue 2 says about Level 1 and Level 2 AI, and what proposed Issue 03 adds for Level 0 and Level 3.https://aiassurancedirectory.com/articles/eu-ai-act-gpai-model-obligations/https://aiassurancedirectory.com/articles/eu-ai-act-gpai-model-obligations/Wed, 14 Oct 2026 00:00:00 GMTChapter V GPAI model duties apply from 2 August 2025. They are not the postponed high-risk system dates, and not an aviation AMC.https://aiassurancedirectory.com/articles/eu-ai-act-obligations-aerospace-suppliers-outside-eu/https://aiassurancedirectory.com/articles/eu-ai-act-obligations-aerospace-suppliers-outside-eu/Wed, 14 Oct 2026 00:00:00 GMTHow Article 2 of the EU AI Act can apply to aerospace suppliers established outside the Union, and which aviation and defence exclusions the official text actually states.https://aiassurancedirectory.com/articles/eu-ai-act-scope-defense-and-aviation/https://aiassurancedirectory.com/articles/eu-ai-act-scope-defense-and-aviation/Wed, 14 Oct 2026 00:00:00 GMTHow the AI Act's military exclusion, dual-use rule and civil aviation treatment work, and which compliance dates apply after the July 2026 Digital Omnibus.https://aiassurancedirectory.com/articles/executive-order-14434-super-intelligence-aerospace-defense/https://aiassurancedirectory.com/articles/executive-order-14434-super-intelligence-aerospace-defense/Wed, 14 Oct 2026 00:00:00 GMTWhat EO 14434 changes for U.S. executive-branch documents, and what it does not: statutes, regulations, historical records, and non-federal standards.https://aiassurancedirectory.com/articles/faa-ai-safety-assurance-roadmap-explained/https://aiassurancedirectory.com/articles/faa-ai-safety-assurance-roadmap-explained/Wed, 14 Oct 2026 00:00:00 GMTA plain-language walk through the FAA's Roadmap for Artificial Intelligence Safety Assurance Version I - what it commits to, what it leaves open, and what it means for applicants.https://aiassurancedirectory.com/articles/faa-easa-ai-certification-timelines/https://aiassurancedirectory.com/articles/faa-easa-ai-certification-timelines/Wed, 14 Oct 2026 00:00:00 GMTFAA AI Safety Assurance Roadmap milestones versus EASA AI Roadmap 2.0 and RMT.0742 dates: what is published and what is still scheduled.https://aiassurancedirectory.com/articles/faa-part-108-bvlos-and-dod-3000-09/https://aiassurancedirectory.com/articles/faa-part-108-bvlos-and-dod-3000-09/Wed, 14 Oct 2026 00:00:00 GMTTwo live autonomy regimes: the FAA/TSA NPRM that would create 14 CFR Part 108 for civil UAS BVLOS, versus DoD Directive 3000.09 on autonomy in weapon systems.https://aiassurancedirectory.com/articles/fedramp-and-il-levels-for-ai-saas-in-defense/https://aiassurancedirectory.com/articles/fedramp-and-il-levels-for-ai-saas-in-defense/Wed, 14 Oct 2026 00:00:00 GMTWhat FedRAMP.gov and official DoD pages actually say about FedRAMP Certification versus DoD Impact Levels for AI cloud services — two different systems.https://aiassurancedirectory.com/articles/formal-verification-neural-networks-whats-usable-today/https://aiassurancedirectory.com/articles/formal-verification-neural-networks-whats-usable-today/Wed, 14 Oct 2026 00:00:00 GMTWhat official neural-network verifier docs and papers actually claim, using ACAS Xu aviation examples, and what they do not make a certification path.https://aiassurancedirectory.com/articles/human-machine-teaming-requirements-dod-nato/https://aiassurancedirectory.com/articles/human-machine-teaming-requirements-dod-nato/Wed, 14 Oct 2026 00:00:00 GMTWhat official DoD, NATO, UK MOD and EASA pages actually say about human judgment, human control and human-AI teaming.https://aiassurancedirectory.com/articles/iso-42001-vs-nist-ai-rmf-crosswalk/https://aiassurancedirectory.com/articles/iso-42001-vs-nist-ai-rmf-crosswalk/Wed, 14 Oct 2026 00:00:00 GMTHow the certifiable ISO/IEC 42001 management system and the voluntary NIST AI RMF fit together, with example mappings taken from NIST's published crosswalk.https://aiassurancedirectory.com/articles/iso-iec-23894-and-5338-for-engineering-teams/https://aiassurancedirectory.com/articles/iso-iec-23894-and-5338-for-engineering-teams/Wed, 14 Oct 2026 00:00:00 GMTWhat ISO catalog abstracts say ISO/IEC 23894:2023 risk guidance and ISO/IEC 5338:2023 life-cycle processes are, and that neither is a certifiable AIMS or aviation AMC.https://aiassurancedirectory.com/articles/iso-iec-24029-neural-network-robustness/https://aiassurancedirectory.com/articles/iso-iec-24029-neural-network-robustness/Wed, 14 Oct 2026 00:00:00 GMTISO/IEC TR 24029-1 and 24029-2 assess neural-network robustness. Catalog text only: they are not an FAA or EASA AMC. Part 3 is still a draft.https://aiassurancedirectory.com/articles/iso-iec-42001-certification-audit-what-auditors-ask/https://aiassurancedirectory.com/articles/iso-iec-42001-certification-audit-what-auditors-ask/Wed, 14 Oct 2026 00:00:00 GMTWhat UKAS- and ANAB-accredited certification bodies publish about an ISO/IEC 42001 audit, from public accreditation and certification-body material only.https://aiassurancedirectory.com/articles/iso-iec-42001-vs-iso-9001-as9100-aerospace-quality/https://aiassurancedirectory.com/articles/iso-iec-42001-vs-iso-9001-as9100-aerospace-quality/Wed, 14 Oct 2026 00:00:00 GMTWhat ISO, IAQG and ANAB actually say about AI management systems versus quality management and the 9100-series — and that we found no official ICOP 42001 scheme.https://aiassurancedirectory.com/articles/iso-iec-42005-ai-system-impact-assessment/https://aiassurancedirectory.com/articles/iso-iec-42005-ai-system-impact-assessment/Wed, 14 Oct 2026 00:00:00 GMTISO/IEC 42005:2025 is guidance for AI system impact assessments. Catalog facts only: it complements 42001 and 23894 and is not a certifiable AIMS.https://aiassurancedirectory.com/articles/iso-iec-tr-5469-and-iec-61508-for-ml/https://aiassurancedirectory.com/articles/iso-iec-tr-5469-and-iec-61508-for-ml/Wed, 14 Oct 2026 00:00:00 GMTWhat official ISO and IEC catalog pages say about AI in safety-related functions, and what they do not say about SIL for machine learning.https://aiassurancedirectory.com/articles/itar-ear-export-controls-and-ai-models/https://aiassurancedirectory.com/articles/itar-ear-export-controls-and-ai-models/Wed, 14 Oct 2026 00:00:00 GMTWhat BIS and DDTC official pages actually control for AI models and software: USML technical data, EAR model weights under ECCN 4E091, and what they do not call a general AI license.https://aiassurancedirectory.com/articles/japan-mod-ai-utilization-policy/https://aiassurancedirectory.com/articles/japan-mod-ai-utilization-policy/Wed, 14 Oct 2026 00:00:00 GMTWhat Japan's July 2024 防衛省ＡＩ活用推進基本方針 and ATLA's Guideline for Responsible AI Application in R&D of AI-Equipped Defense Systems actually say.https://aiassurancedirectory.com/articles/mapping-ai-models-to-do-178c-do-330-tool-qualification/https://aiassurancedirectory.com/articles/mapping-ai-models-to-do-178c-do-330-tool-qualification/Wed, 14 Oct 2026 00:00:00 GMTWhat DO-330 actually qualifies, why a trained model is usually the software item rather than a tool, and what the FAA has said about extending DO-330 to AI.https://aiassurancedirectory.com/articles/model-cards-and-system-cards-for-defense-ai-documentation/https://aiassurancedirectory.com/articles/model-cards-and-system-cards-for-defense-ai-documentation/Wed, 14 Oct 2026 00:00:00 GMTWhat official model-card and system-card pages actually specify, and what CDAO and NIST documents do and do not require for defense programs.https://aiassurancedirectory.com/articles/nato-revised-ai-strategy-principles-of-responsible-use/https://aiassurancedirectory.com/articles/nato-revised-ai-strategy-principles-of-responsible-use/Wed, 14 Oct 2026 00:00:00 GMTWhat NATO's 2021 and 2024 Artificial Intelligence Strategy summaries actually say about the six Principles of Responsible Use, TEV&V, DIANA and Allied industry.https://aiassurancedirectory.com/articles/nist-ai-600-1-for-defense-contractors/https://aiassurancedirectory.com/articles/nist-ai-600-1-for-defense-contractors/Wed, 14 Oct 2026 00:00:00 GMTWhat NIST AI 600-1 actually is, which generative-AI risks it names, and how that sits next to CMMC and DoD Responsible AI rather than replacing them.https://aiassurancedirectory.com/articles/nist-ai-600-1-generative-actions-defense/https://aiassurancedirectory.com/articles/nist-ai-600-1-generative-actions-defense/Wed, 14 Oct 2026 00:00:00 GMTWhich NIST AI 600-1 suggested actions name acquisition, contractors, national security and information security, and what they do not make mandatory for DoD work.https://aiassurancedirectory.com/articles/nist-sp-800-171-controls-ai-tools-cui/https://aiassurancedirectory.com/articles/nist-sp-800-171-controls-ai-tools-cui/Wed, 14 Oct 2026 00:00:00 GMTOfficial pages do not rank a subset of 800-171 for AI. What CMMC, NIST and NSA/CISA actually say when AI systems process CUI.https://aiassurancedirectory.com/articles/rotorcraft-evtol-autonomy-faa-easa-powered-lift/https://aiassurancedirectory.com/articles/rotorcraft-evtol-autonomy-faa-easa-powered-lift/Wed, 14 Oct 2026 00:00:00 GMTFAA powered-lift AC 21.17-4, the FAA Safety Framework for Aircraft Automation, and EASA SC-VTOL: what they say, and that a search of SC-VTOL-02 found no AI or ML words.https://aiassurancedirectory.com/articles/runtime-assurance-simplex-architectures-ml-in-flight/https://aiassurancedirectory.com/articles/runtime-assurance-simplex-architectures-ml-in-flight/Wed, 14 Oct 2026 00:00:00 GMTWhat NASA, ASTM F3269-21 and the 1998 Simplex paper say about runtime assurance for ML in flight — and what they do not call a means of compliance.https://aiassurancedirectory.com/articles/sae-g-34-arp6983-status/https://aiassurancedirectory.com/articles/sae-g-34-arp6983-status/Wed, 14 Oct 2026 00:00:00 GMTEUROCAE WG-114 still lists ED-324 / ARP6983 as Draft. Companion ER drafts, published AIR dates, and what EASA and the FAA have and have not accepted.https://aiassurancedirectory.com/articles/space-systems-and-ai-assurance-nasa-esa-ussf/https://aiassurancedirectory.com/articles/space-systems-and-ai-assurance-nasa-esa-ussf/Wed, 14 Oct 2026 00:00:00 GMTWhat NASA SWEHB Artificial Intelligence topics, ESA AISSA public pages and the Space Force FY2025 Data and AI plan actually say — and what they do not call a certification standard.https://aiassurancedirectory.com/articles/uk-mod-jsp-936-supplier-obligations/https://aiassurancedirectory.com/articles/uk-mod-jsp-936-supplier-obligations/Wed, 14 Oct 2026 00:00:00 GMTWho UK MOD JSP 936 Part 1 binds, what must versus should means for suppliers, how legacy AI is treated, and how the AI Practitioner's Handbook relates.https://aiassurancedirectory.com/articles/uk-mod-jsp-936-vs-dod-responsible-ai/https://aiassurancedirectory.com/articles/uk-mod-jsp-936-vs-dod-responsible-ai/Wed, 14 Oct 2026 00:00:00 GMTWhat official UK MOD and US DoD pages each claim about dependable or responsible AI, without inventing a clause-by-clause map.https://aiassurancedirectory.com/articles/ul-4600-vs-aviation-and-dod-autonomy/https://aiassurancedirectory.com/articles/ul-4600-vs-aviation-and-dod-autonomy/Wed, 14 Oct 2026 00:00:00 GMTWhat UL 4600’s public catalog actually scopes (autonomous vehicles, no human driver) versus FAA, EASA and DoD 3000.09 pages. Not an aviation AMC we have found.