{"id":"PLT-005","section":"Platform, Privacy & Assurance","requirement":"Support network-based AI traffic detection where the architecture requires it","acceptance":"Integrate with SASE or network controls, identify AI hosts and protocols, and state whether the implementation is passive or inline.","tier":"AT0–AT2","whyItMatters":"Some architectures need network-level coverage, and the difference between passive and inline matters.","verificationMethod":"W + D","verificationTest":"The vendor shows the network integration and states whether it is passive or inline.","formerly":"ARC-001","alsoIn":[],"sort":59,"adoptionContext":"Shadow, vendor-embedded and platform-integrated AI can create network-visible traffic; whether network inspection is appropriate depends on the architecture.","mappings":[{"frameworks":["soc2"],"explanation":"AI host and protocol identification adds network and external-service monitoring evidence and informs network-protection design. Passive versus inline coverage identifies the architecture; it does not prove enforced access restrictions, segmentation or secure network configuration.","kind":"framework","references":{"soc2":["CC7.2"]},"relation":null,"conditions":[]},{"frameworks":["rmf"],"explanation":"Supported protocols, integration points and passive/inline boundaries help document controls for AI components and associated dependencies. The architecture description must be tied to actual deployed coverage.","kind":"framework","references":{"rmf":["MAP 4.2"]},"relation":null,"conditions":[]},{"frameworks":["iso"],"explanation":"Network coverage and deployment dependencies inform the computing-resource record for the AI system. An integration claim is not evidence that those resources are adequate or securely operated.","kind":"framework","references":{"iso":["A.4.5"]},"relation":null,"conditions":[]},{"frameworks":["iso27001"],"explanation":"Observed AI hosts and protocols supply network-activity signals for security monitoring. Demonstrate traffic results and missed paths; passive visibility does not establish network enforcement, segmentation or secure configuration.","kind":"framework","references":{"iso27001":["A.8.16"]},"relation":null,"conditions":[]},{"frameworks":["csf"],"explanation":"Observed AI hosts and protocols support network monitoring; observable external AI service traffic can also inform service-provider monitoring. Passive detection does not protect a network from unauthorized access, so show the traffic actually observed and the remaining gaps.","kind":"framework","references":{"csf":["DE.CM-01","DE.CM-06"]},"relation":null,"conditions":[]}],"area":"Platform, Privacy & Assurance","areaSlug":"PLT","url":"/r/PLT-005","frameworkRefs":{"ISO27001":["A.8.16"],"ISO42001":["A.4.5"],"NIST-CSF":["DE.CM-01","DE.CM-06"],"NIST-AI-RMF":["MAP 4.2"],"SOC2":["CC7.2"]}}