Core Governance OS

Overview

Core Governance OS is the cross-framework intelligence layer that connects EU AI Act, ISO 42001, ISO 27001, and NIST AI RMF into a unified governance view. Instead of managing each framework independently, Governance OS shows you where controls overlap, recommends which frameworks to prioritize, and measures coverage across your projects.

The module has three main tools: Framework Mapper for exploring control relationships, Scenario Builder for getting governance recommendations, and Unified Insights for per-project coverage analysis.

Framework Mapper

The Framework Mapper shows how controls in one framework relate to controls in another. Select a source and target framework to see all known mappings between them.

Mapping strength

• Direct: The controls address the same requirement. Implementing one fully satisfies the other.
• Partial: The controls overlap but each has unique aspects. You get partial credit toward the other.
• Related: The controls cover similar topics but from different angles. Useful context but not a substitute.

Domain filtering

Mappings are tagged with governance domains (like data governance, transparency, or risk management). Click a domain tile to filter the list and focus on one area at a time. Click again to clear the filter.

Scenario Builder

The Scenario Builder helps you decide which frameworks to adopt and in what order. It uses a rule-based recommendation engine that considers your industry, region, risk level, and use case type.

Getting recommendations

1. Select your industry, region, risk level, and use case type from the dropdowns. You can leave fields blank to broaden results.
2. Click Get Recommendations. The engine scores each pre-built scenario against your criteria.
3. Review the results. Each recommended scenario shows a match percentage and which rules it matched.
4. Click Select on the scenario that fits your organization. This saves it as your active governance strategy.

What is a scenario?

A governance scenario defines a framework priority order: which framework is primary (your main compliance target), which are secondary (supporting frameworks), and which are supplementary (nice-to-have). This priority guides resource allocation and task sequencing.

Unified Insights

Unified Insights provides per-project coverage analysis. Select a project to see how well it covers each of its assigned frameworks.

Reading coverage data

• Coverage percentage: How many controls in that framework have been mapped to implemented controls in the project.
• Gaps: Controls that are required by the framework but not yet addressed. These need attention.
• Synergies: Controls that satisfy requirements in multiple frameworks simultaneously. These represent efficiency gains.

Refreshing coverage

Coverage data is computed on demand. Click Refresh Coverage after making changes to your project controls to recalculate the numbers. The summary cards at the top update automatically after a refresh.