| Foundations |
Programme charter for AI-enabled defence |
1 |
Chapter 1 |
| Foundations |
CSF profile as code with an AI focus |
3 |
Appendix A |
| Govern |
Risk-appetite statement for security AI |
5 |
planned |
| Govern |
Autonomy-level decision record |
6 |
Appendix A |
| Govern |
Rules-of-engagement manifest |
7 |
Appendix A |
| Govern |
Supplier assurance requirements |
8 |
planned |
| Identify |
Agent asset record; threat model |
9, 10 |
planned |
| Identify |
Patch-velocity policy; emulation plan |
11, 12 |
planned |
| Identify |
AI red-team campaign and containment test plans |
13 |
planned |
| Protect |
Synthetic-media-resistant approvals; deepfake exercise |
14, 15 |
planned |
| Protect |
Guardrail policy; degradation modes |
16, 17 |
planned |
| Detect |
Permission manifest for a SOC investigation agent |
18 |
Appendix A |
| Detect |
Detection rule with test cases |
19 |
planned |
| Respond |
Incident record; reporting-clock configuration |
20, 21 |
planned |
| Recover |
Recovery plan as code; return-to-service checklist; restore drill |
22–24 |
planned |
| Verification |
Chaos experiment manifest; safety-boundary policy |
25 |
Appendix A |
| Improvement |
Finding record carried to verified closure |
26 |
Appendix A |
| Improvement |
Purple-session agenda and metric definitions |
26 |
planned |