Cheewan LogoCHEEWAN.AI // DEFENSIVE FRAMEWORK v3.0← Framework home
BOARD VIEW // YOU ARE HERE

CSF Crosswalk

Map catalogued threats and controls to the CSF function you already report against. Function first.

Start here if the board or a regulator is your audience.

Current view
TEAM VIEW // RUNNING A LIVE THREAT?

Response Swimlane

See who acts, in what order, for a selected threat. Threat first, with delegation fallback for lean teams.

Start here if you run the team that responds.

Open Swimlane →
EVALUATION VIEW // EVALUATING A CAPABILITY?

Stack Lab (Preview)

Evaluate what a capability stack changes across the six functions.

Start here if you are choosing or defending a security stack.

Open Stack Lab →
Crosswalk view // MITRE ATLAS v2026.05

NIST CSF 2.0 for agentic AI threats

The board-facing entry into the six-domain framework. Pick the CSF function your programme already reports against, and see which of the 21 validated threats, mitigation controls, and Singapore anchors (IMDA MGF, MAS AIRG, CSA Singapore) land there. Govern wraps the five operational functions, it is not a peer.

Maps to domains
D01 Govern
AI augmentation
Human-gated

Governance stays human-owned. AI assists inventory and reporting only.

NIST AI RMF Govern function
90-day sequence
Days 1 to 30

Register AI-orchestrated intrusion and AI-system compromise as named risks. Nominate a named owner per domain.

Singapore anchor

IMDA MGF dimension 1 (bounding risk); MAS AIRG (AI inventory, senior-management oversight).

Threats that land here
Anchor incident: 80 to 90 percent autonomous espionage
First attributed nation-state LLM use
Mitigation controls
M-A2-02DConsume vendor abuse-detection threat reports (Anthropic, OpenAI, GTIG)NIST AI RMF Govern
M-A2-03DISAC and threat-intelligence sharing participationNIST AI RMF Govern
M-A4-04RVendor threat-intel sharing protocols (direct channels with AI providers)NIST AI RMF Govern
Next action // Days 1 to 30

Register AI-orchestrated intrusion and AI-system compromise as named risks. Nominate a named owner per domain.

AI-augmentableHuman-gated / mixedNot yet mature / open gapArrow keys to move between functions
Steady-state ownership //Steady-state ownership (who owns each domain year-round) lives in the framework document, Section 2.4.