---

​

title: “External Sources” description: “External standards, regulations, and guidance referenced by the AIGO Framework.”

​

External Sources

AIGO uses external regulations, standards, and guidance as reference sources for framework mappings, comparative analysis, and implementation-oriented traceability.

​

Purpose

External source references help organizations understand how AIGO relates to established AI governance, regulatory, risk-management, and management-system frameworks. AIGO does not claim ownership of third-party standards, regulations, or guidance.

​

Authority principle

When interpreting an external requirement, the authoritative source remains the issuing organization, standards body, regulator, or legal authority. AIGO mappings are analytical and implementation-oriented materials. They should be reviewed against current authoritative sources before being used for: * legal determinations * regulatory decisions * contractual commitments * certification activities * conformity assessments * high-impact governance decisions

​

EU AI Act

AIGO includes an interpretive mapping to the European Union Artificial Intelligence Act. Primary legal source: EUR-Lex The AIGO mapping distinguishes, where applicable, between binding EU law, official implementation material, AIGO interpretation, and organization-specific legal determinations. The mapping does not constitute legal advice or establish regulatory compliance.

​

ISO/IEC 42001

AIGO includes an interpretive mapping to ISO/IEC 42001. Primary source: ISO ISO/IEC 42001 remains the authoritative standard for its own requirements. AIGO does not reproduce the standard and does not represent: * ISO certification * conformity assessment * accreditation * ISO endorsement * official ISO conformity The AIGO mapping should therefore be treated as a separate analytical mapping rather than as a replacement for the standard.

​

NIST AI RMF

AIGO includes an interpretive mapping to the NIST Artificial Intelligence Risk Management Framework. Primary source: NIST AIGO does not represent: * NIST endorsement * NIST certification * accreditation * official NIST conformity The NIST mapping provides an AIGO-controlled analytical relationship to the NIST AI RMF.

​

Cross-framework mappings

AIGO also provides cross-framework relationships among: * EU AI Act * ISO/IEC 42001 * NIST AI RMF * AIGO These relationships identify connections among governance concepts, requirements, controls, evidence, lifecycle activities, and assurance considerations. They do not imply that the underlying requirements are equivalent or interchangeable.

​

Source maintenance

External requirements and standards can change independently of AIGO. AIGO therefore treats external-source maintenance as an ongoing activity. Mapping materials should be reviewed when: * an external requirement changes * authoritative guidance changes * applicability conditions change * AIGO controls or governance concepts change * mapping assumptions change * new implementation or assurance expectations emerge

​

Repository authority

The AIGO repository is authoritative for the AIGO-controlled mapping artifacts. It is not authoritative for the external standards, regulations, or guidance being mapped. For external obligations, the issuing authority remains authoritative.

​

Important limitation

An AIGO mapping can improve traceability and implementation planning, but the existence of a mapping does not establish: * legal compliance * regulatory conformity * certification * accreditation * contractual compliance * official endorsement by the external authority Organizations remain responsible for making their own determinations based on the current authoritative external sources and their specific circumstances.