Starting Without Full Observability
This companion guide explains how organizations can establish an AI Register and Accountability Gate before mature observability exists. It sets out a practical sequence for introducing minimum logging requirements and expanding Continuous Monitoring as better signals become available.
Built for California’s CCPA Regulations
This companion document maps California’s finalized CCPA requirements for automated decision-making technology, risk assessments, and cybersecurity audits to the program’s existing governance mechanisms. It also identifies where additional organization-specific work is still required.
Digital Trust Maturity Scorecard
This practical scorecard assesses current Digital Trust and Accountability capabilities against the Govern, Map, Measure, and Manage functions of the NIST AI Risk Management Framework. It helps organizations identify their lowest-scoring areas and convert them into three owned, time-bound priorities.
The Gaps Between the Frameworks
NIST AI RMF, ISO/IEC 42001, and the EU AI Act do not provide a complete operating model on their own. This companion document identifies four practical gaps and shows how Digital Trust and Accountability addresses them without replacing the underlying frameworks.
Mapped Against Five Frameworks
This companion document maps the program against the EU AI Act, NIST AI RMF, ISO/IEC 42001, Singapore’s agentic AI framework, and China’s agentic AI rules. It shows which program mechanisms address specific requirements and where additional organizational or jurisdiction-specific work remains.