BSI AIC4 — AI Cloud Service Compliance Criteria

BSI AIC4 — AI Cloud Service Compliance Criteria — 100% of in-scope requirements covered.

3 requirements · 2 in scope (2 enforced) · 1 out-of-scope (outside KYE™’s authority layer). The 100% is weighted over the in-scope base.

BSI AIC4: requirement → the KYE™ artefact that enforces it

Demo data

You learn: Which requirements KYE™ enforces at runtime and with which artefact. You can: Walk the requirements.

  1. security-robustness-action · enforced

    Security & robustness — an AI decision is authorised, evidenced and replay-provable at the moment it occurs

    Audit events: kye.purpose.admissibility.v1, kye.evidence.pack.v1, kye.replay.proof.v1 · Constitution: 12 purpose permission, 13 resilience loop

  2. performance-bias-explainability · enforced

    Performance, bias mitigation & explainability — the AI decision record captures the inputs, policy and…

    Audit events: kye.evidence.decision_map.v1 · Constitution: 13 resilience loop

  3. cloud-platform-operations · out-of-scope

    Cloud-platform operations, data centre & training-environment criteria

    (no enforcement cited)

How this widget is built
Demonstrates
KYE™ Compliance Mapping Rail™
Components
  • Framework requirement (clause)
  • Coverage status
  • KYE™ enforcement artefact (event, decision-record field, Evidence Pack™ entry)
Flow
Clause → status → the KYE™ artefact that enforces it, enforced requirements first. Architecture diagram
Used on

Source: BSI (German Federal Office for Information Security), AI Cloud Service Compliance Criteria Catalogue (AIC4), 2021. One of the frameworks the CSA AICM crosswalks to. AICM defines the controls; KYE™ operationalises them. KYE™ binds the security-and-robustness criteria that resolve at AI-action time and marks the cloud-platform operational and training-environment criteria out of scope. · License: BSI AIC4 is published by the BSI; KYE™ paraphrases each criterion's intent and cites the official identifier for mapping purposes only.

By category

CategoryReqsEnforcedDesignedAdvisoryDeferredCoverage
Security & robustness of AI decisions (evidenced at action time)11000100%
Performance, bias mitigation & explainability of the decision record11000100%
Cloud-platform operations & training-environment criteria100000%

Every requirement → the KYE™ artefact that enforces it

IDTitleStatusKYE™ enforcement
bsi-aic4.security-robustness-actionSecurity & robustness — an AI decision is authorised, evidenced and replay-provable at the moment it occursenforcedaudit_events: kye.purpose.admissibility.v1, kye.evidence.pack.v1, kye.replay.proof.v1
engines: internal, internal
constitution_refs: constitution/12-PURPOSE-PERMISSION.md, constitution/13-RESILIENCE-LOOP.md
bsi-aic4.performance-bias-explainabilityPerformance, bias mitigation & explainability — the AI decision record captures the inputs, policy and rationaleenforcedaudit_events: kye.evidence.decision_map.v1
engines: internal
constitution_refs: constitution/13-RESILIENCE-LOOP.md
bsi-aic4.cloud-platform-operationsCloud-platform operations, data centre & training-environment criteriaout-of-scope(no enforcement cited)

Canonical KYE™ surfaces referenced on this page: KYE Protocol™.