{"id":"SPM-001","section":"AI Security Posture Management","requirement":"Classify previously unseen AI applications on first encounter","acceptance":"Identify and risk-score an AI application the platform has not seen before, without waiting for a signature, category list or catalog update, and show the evidence behind the classification.","tier":"AT0–AT4","whyItMatters":"Waiting for a catalog update leaves every new tool ungoverned during the period it is most likely to be tried.","verificationMethod":"LT","verificationTest":"An AI tool the vendor has not seen before is classified and risk-scored on first use, with the evidence shown.","formerly":"DIS-014","alsoIn":[],"sort":0,"adoptionContext":"Shadow AI is the primary first-encounter discovery scenario; an unfamiliar application should not require a prior catalog entry to become visible.","mappings":[{"frameworks":["csf","iso27001"],"explanation":"Evidence-based first-encounter classification supplies timely software-inventory and risk-assessment inputs without catalog delay. A classification or score is not a maintained, owned inventory or a complete risk assessment.","kind":"framework","references":{"csf":["ID.AM-02","ID.RA-05"],"iso27001":["Cl. 6.1.2","A.5.9"]},"relation":null,"conditions":[]},{"frameworks":["rmf"],"explanation":"Evidence behind unfamiliar-app classification helps map third-party AI component risks. The buyer must validate that evidence; signature-free detection is an implementation choice, not a complete risk-mapping process.","kind":"framework","references":{"rmf":["MAP 4.1"]},"relation":null,"conditions":[]},{"frameworks":["soc2"],"explanation":"New-service classification and scoring inform risk evaluation and supplier review. The buyer must validate scoring evidence and make the subsequent due-diligence and treatment decisions.","kind":"framework","references":{"soc2":["CC3.2","CC9.2"]},"relation":null,"conditions":[]},{"frameworks":["iso"],"explanation":"First-encounter identity and classification evidence help identify an AI resource for documentation. A one-time classification does not establish continued operational monitoring or support.","kind":"framework","references":{"iso":["A.4.2"]},"relation":null,"conditions":[]}],"area":"AI Security Posture Management","areaSlug":"SPM","url":"/r/SPM-001","frameworkRefs":{"ISO27001":["Cl. 6.1.2","A.5.9"],"ISO42001":["A.4.2"],"NIST-CSF":["ID.AM-02","ID.RA-05"],"NIST-AI-RMF":["MAP 4.1"],"SOC2":["CC3.2","CC9.2"]}}