Reference

Standards mapping matrix

Every ACF® methodological card is mapped to five major standards: EU AI Act, ISO/IEC 42001, NIST AI RMF, GDPR, COBIT 2019. The mapping is conservative, only the principal article is cited. The full machine-readable matrix is exposed via the acf.regulation.article MCP tool.

iNote

Type into the filter to narrow the matrix to a fiche, an article, or a keyword (“kill switch”, “art. 22”, “audit”…). Click any cell to highlight it. Toggle the standard columns to compare two frameworks side by side.

ACF® Fiche	EU AI Act	ISO/IEC 42001	NIST AI RMF	GDPR	COBIT 2019
`ACF-01`Sovereignty ScoreMeasure your exposure before automating
`ACF-02`Decision MapMap your decisions and their level of autonomy
`ACF-03`Criticality MatrixWhich decisions can be delegated to an agent?
`ACF-04`Agentic ConstitutionThe rules, limits and responsibilities of the agent
`ACF-05`Agent CardFrame every deployed agent
`ACF-06`Supervision & GovernanceMonitor, measure and keep the agent compliant
`ACF-07`Kill SwitchEmergency shutdown protocol
`ACF-08`First Agent DossierDocument, frame and prepare the deployment of your first agent
`ACF-09`Agentic Decisions RegisterLog significant decisions and incidents to ensure traceability and compliance
`ACF-10`Action Plan & ImprovementSteer corrective actions and continuous improvement of your agents
`ACF-11`30-Day Governance AuditAssess the maturity of your agentic governance and build a 30-day action plan
`ACF-12`Agentic Risk AssessmentIdentify, assess and prioritize risks tied to your AI agents to control them more effectively
`ACF-13`Agent MandateDefine the scope, limits and responsibilities of every deployed agent
`ACF-14`Responsibility by DesignResponsibility by Design · embedding accountability from inception
`ACF-18`Guided Case StudyApply the ACF® framework to a real-world scenario, step by step
`ACF-19`Instructor's GuideFacilitate, grade and evaluate agentic governance workshops
`ACF-20`Governance SimulationTrain to decide, arbitrate and supervise in real-world conditions

17 / 17 fiches5 / 5 standards

How to read the matrix

ACF-09 (Agentic Decisions Register) directly implements the EU AI Act Art. 12 obligation on automatic event logging and Art. 26(6) on six-month log retention by the deployer. ISO/IEC 42001-side, it falls under clause 9.1 (monitoring, measurement, analysis, evaluation). NIST AI RMF-side, MEASURE-2. GDPR-side, Art. 30 (record of processing activities). COBIT-side, MEA-01.

A compliance team that deploys ACF-09 produces, in one motion, the artifacts that all five standards demand. That is the economy of scale the matrix makes operational.

Programmatic access

This matrix is derived from the same JSON consumed by the MCP server. To consume it inside an AI agent, use the acf.regulation.article tool and pass an article identifier (e.g. AI Act Art. 9); you get the verified text + the list of ACF® fiches operationalising it + their mapping cells for the other four standards.

Versioning

The mapping is versioned with the doctrine. The current version is embedded in every doctrine_hash emitted by acf-mcp. When a standard evolves (e.g. AI Act amendment), a new doctrine_version ships and the signature changes. Prior versions stay verifiable.