{ "format": "agent-article-v0", "article_id": "EA-107", "canonical_url": "/tools/ea-107-enterprise-ai", "page_type": "reference", "claim_ids": [], "evidence_ids": [ "EVD-EA-107-URL-54DBC1541342", "EVD-EA-107-URL-7EDE95CB3D6E", "EA-107-R11-RESEARCH", "EA-107-R11-WEB-READBACK" ], "unknown_ids": [ "EA-107-UNKNOWN-01", "EA-107-UNKNOWN-CURRENTNESS" ], "operational_object_ids": [], "provider": [], "models": [], "plans": [], "surfaces": [], "regions": [], "current_status": "UNKNOWN", "observation_status": "SPEC_ONLY", "freshness": "UNKNOWN", "last_verified": null, "supersedes": [], "superseded_by": [], "provenance": [ "COMM-039-EA0107", "SRC-EA-107-URL-54DBC1541342", "SRC-EA-107-URL-7EDE95CB3D6E", "WEBBODY-EA0107-R8-2E42DE12" ], "article_sources": [ { "id": "EVD-EA-107-URL-54DBC1541342", "evidence_class": "RESEARCH", "title": "1) source class: official framework; exact title: Artificial Intelligence Risk Management Framework; author/org: NIST; canonical URL:", "href": "https://www.nist.gov/itl/ai-risk-management-framework", "supports": [], "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。", "origin_class": "SOURCE_PACKET_REFERENCE", "source_or_experiment_ids": [ "SRC-EA-107-URL-54DBC1541342" ], "supporting_locators": [ "EVIDENCE TABLE", "1) source class: official framework; exact title: Artificial Intelligence Risk Management Framework; author/org: NIST; canonical URL: https://www.nist.gov/itl/ai-risk-management-framework" ], "scope": "EVIDENCE TABLE", "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED" }, { "id": "EVD-EA-107-URL-7EDE95CB3D6E", "evidence_class": "RESEARCH", "title": "2) source class: international standard; exact title: ISO/IEC 42001:2023 Information technology — Artificial intelligence — Management system; author/org: ISO/IEC JTC 1/SC 42; cano", "href": "https://www.iso.org/standard/42001", "supports": [], "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。", "origin_class": "SOURCE_PACKET_REFERENCE", "source_or_experiment_ids": [ "SRC-EA-107-URL-7EDE95CB3D6E" ], "supporting_locators": [ "EVIDENCE TABLE", "2) source class: international standard; exact title: ISO/IEC 42001:2023 Information technology — Artificial intelligence — Management system; author/org: ISO/IEC JTC 1/SC 42; canonical URL: https://www.iso.org/standard/42001" ], "scope": "EVIDENCE TABLE", "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED" }, { "id": "EA-107-R11-RESEARCH", "evidence_class": "RESEARCH", "title": "EA-107 監査済みresearch / canonical revision binding", "supports": [ "NIST/ISOが今回確認できる範囲は、risk managementの機能・組織管理システム・継続改善であり、ad-hoc→標準化→managed agents→autonomyという4段階の成熟度尺度を規範として定義していない。したがって、その段階名・スコア・合格基準は本調査ではPROPOSAL/INFERENCEに留める。根拠付きにできるのは、各段階をGovern/Map/Measure/Manage、AIMSのpolicy/process/evidenceへ写像する設計である。" ], "limit": "canonical監査・revision bindingの存在を示す。外部ソースcurrentnessが本文またはcontrol-planeで確定していない場合は、currentnessをUNKNOWNのまま保持する。", "origin_class": "AUDITED_CANONICAL_RESEARCH_PACKET", "source_or_experiment_ids": [ "COMM-039-EA0107" ], "supporting_locators": [ "COMM-039-EA0107", "EA-107-R5-LEGACY-MIGRATION-20261008-R1", "content/staging/EA-107.md" ], "scope": "監査済みEA本文・canonical revision・既存Source Graph relationの範囲。欠損currentnessは推測で閉じない。", "provenance_status": "AUDIT_PASS_CANONICAL_BINDING" }, { "id": "EA-107-R11-WEB-READBACK", "evidence_class": "IMPL", "title": "EA-107 Web body identity / canonical readback", "supports": [ "canonical staging bodyのSHA-256一致とR9 canonical ledger readbackをProduction projectionの入力として検証する。" ], "limit": "body identity/readbackは本文claim自体の真偽や外部ソースの最新性を追加保証しない。", "checked_at": null, "origin_class": "IMPLEMENTATION_READBACK", "source_or_experiment_ids": [ "WEBBODY-EA0107-R8-2E42DE12" ], "supporting_locators": [ "WEBBODY-EA0107-R8-2E42DE12", "content/staging/EA-107.md", "EA-107-R5-LEGACY-MIGRATION-20261008-R1" ], "scope": "R9/R10 canonical readback後のProduction生成時body identity。", "provenance_status": "CANONICAL_READBACK_BODY_HASH_MATCH" } ], "research_sections": [ { "heading": "WHY_THIS_MATTERS_TO_UPDATE", "text": "ad-hoc利用から自律運用までを段階化したいが、既存フレームワークの機能軸と組織成熟度の段階を混ぜると、提案モデルを標準事実として誤記する。" }, { "heading": "SCOPE_ROUTING", "text": "Enterprise AI Core / organization / governance / maturity proposal" }, { "heading": "CLAIM_OR_RESEARCH_QUESTION", "text": "NIST AI RMFとISO/IEC 42001は成熟度段階を定義するか。定義しない場合、どこまでを根拠付き提案にできるか。" }, { "heading": "EVIDENCE TABLE", "text": "1) source class: official framework; exact title: Artificial Intelligence Risk Management Framework; author/org: NIST; canonical URL: https://www.nist.gov/itl/ai-risk-management-framework; publication/update/access: 2023-01-26, page accessed 2026-09-13; version/release: AI RMF 1.0 / AI 600-1; supporting locator: lines 132-138（voluntary framework、design/development/use/evaluation、GenAI profile）; evidence label: VERIFIED_SPEC; relation: support / limit。\n2) source class: international standard; exact title: ISO/IEC 42001:2023 Information technology — Artificial intelligence — Management system; author/org: ISO/IEC JTC 1/SC 42; canonical URL: https://www.iso.org/standard/42001; publication/update/access: 2023-12, accessed 2026-09-13; version/release: Edition 1, published; supporting locator: lines 44-48, 84, 98（AIMSの継続改善、Plan-Do-Check-Act、organization-wide management）; evidence label: VERIFIED_SPEC; relation: support / limit。" }, { "heading": "FINDINGS", "text": "NIST/ISOが今回確認できる範囲は、risk managementの機能・組織管理システム・継続改善であり、ad-hoc→標準化→managed agents→autonomyという4段階の成熟度尺度を規範として定義していない。したがって、その段階名・スコア・合格基準は本調査ではPROPOSAL/INFERENCEに留める。根拠付きにできるのは、各段階をGovern/Map/Measure/Manage、AIMSのpolicy/process/evidenceへ写像する設計である。" }, { "heading": "LIMITS / COUNTEREVIDENCE / FAILURE ENVELOPE", "text": "NISTは任意利用。ISO公式公開ページは標準の説明であり、全文要求・認証判定を代替しない。成熟度の段階数や自律性の安全性に一次資料上の固定値はない。" }, { "heading": "AVAILABILITY_GATES", "text": "成熟度を測る単位（組織/portfolio/system）、評価期間、最低evidence、risk tier、human oversight、自律action権限、例外処理を定義する。" }, { "heading": "IMPLEMENTATION_STATE", "text": "実装状態: 4段階モデルは提案候補。NIST/ISOの機能へtraceする評価票の設計まで。組織実査・スコアリング未実施。" }, { "heading": "BENCHMARK_OR_EVAL", "text": "Benchmark: なし。Evaluation: 代表ユースケースのpolicy、risk register、eval、incident、approval、monitoring evidenceを段階別rubricで採点する書類ベースのdry runを後続化。" }, { "heading": "SECURITY / PRIVACY / AUDIT / COST / OPERABILITY", "text": "AUDIT: scoreの根拠evidence必須。SECURITY/PRIVACY: maturity上昇をrisk低下と同一視しない。COST: process/人員/認証工数は未知。OPERABILITY: model version/organization stateをas-of保存。" }, { "heading": "SAFE_WORDING_FOR_FUTURE_BOOK", "text": "「NIST AI RMFとISO/IEC 42001はAIリスク管理・管理システムの基礎を与えるが、ここで示す成熟度段階はそれらの公式段階ではなく、本書の運用提案である。」" }, { "heading": "UPDATE_WORK_HANDOFF", "text": "将来本文では、公式要求と本書提案を列分けし、各段階をevidence checklistで検証可能にする。" }, { "heading": "OPEN_UNKNOWN", "text": "AI agent autonomyを含む成熟度の独立標準、業種別threshold、成熟度と事故率/ROIの因果、第三者評価方法。" }, { "heading": "STOP_CONDITION", "text": "提案段階・スコアをVERIFIED_SPECや法的適合へ昇格しない。\nUNIT_CLOSE_STATUS: INDIVIDUAL_BOUNDED_CLOSE / EVIDENCE_RECORDED / UNKNOWN_PRESERVED\n\n---" }, { "heading": "AUDITED_CURRENTNESS_BOUNDARY", "text": "NIST AI RMF/ISO 42001 do not define the dictionary maturity stage names or universal numerical maturity score; maturity rubric remains DICTIONARY PROPOSAL." } ], "human_url": "/tools/ea-107-enterprise-ai", "markdown_url": "/agent/article.md?path=%2Ftools%2Fea-107-enterprise-ai", "json_url": "/agent/article.json?path=%2Ftools%2Fea-107-enterprise-ai" }