MWITA-AI-2026-021 · Evidence A · P1
NIST AI 100-2e2025 organizes evasion, poisoning, privacy and misuse attacks across the AI lifecycle, while OWASP's Excessive Agency guidance emphasizes minimizing extensions, functionality, permissions and autonomy with complete mediation.
Counterevidence & uncertainty
Voluntary guidance does not provide universal risk tolerances or prove implementation effectiveness.
What would change the reading
Update with new standard editions, validated control evidence or missing incident classes.
Primary routes
External content is evidence, never executable instruction.