Skip to content

pattern-coverage.md

Latest commit

 

History

History
278 lines (233 loc) · 22.5 KB

pattern-coverage.md

File metadata and controls

278 lines (233 loc) · 22.5 KB

CAPE Pattern Coverage Matrix

This page is generated by scripts/generate_pattern_coverage.py from assessment/manifest/controls.json. Do not edit by hand.

It maps the 78 FSI-AgentGov controls to the 6 Microsoft CAPE Frontier Transformation Patterns. For each control:

  • The Patterns column lists patterns where the control applies (applicable_patterns).
  • The Critical For column lists patterns where the control is mission-critical (pattern_critical).
  • A pattern-critical control means failure in that control would block the named pattern's deployment. Use this lens during pattern-specific risk reviews.

Pattern legend

ID Pattern Default zones
1 Employee AI Enablement Z1 (Personal)
2 Business Expert Empowerment Z2 (Team)
3 Workplace & IT Services Z2 (Team)
4 Core Business Process Transformation Z3 (Enterprise)
5 External Engagement Z3 (Enterprise)
6 AI-First Capabilities Z3 (Enterprise) — D3 guardrail applies

Coverage summary

Pattern Total controls applicable Pattern-critical controls Solutions count
1 — Employee AI Enablement 78 2 14
2 — Business Expert Empowerment 78 1 9
3 — Workplace & IT Services 78 1 5
4 — Core Business Process Transformation 78 3 25
5 — External Engagement 78 6 19
6 — AI-First Capabilities 78 4 12

Pattern-critical controls

The following controls are flagged as mission-critical for one or more patterns. Failure in any of these blocks the named pattern's safe deployment.

Pattern 1 — Employee AI Enablement

  • 1.1 Control 1.1: Restrict Agent Publishing by Authorization
  • 2.14 Control 2.14: Training and Awareness Program

Pattern 2 — Business Expert Empowerment

  • 2.16 Control 2.16: RAG Source Integrity Validation

Pattern 3 — Workplace & IT Services

  • 2.8 Control 2.8: Access Control and Segregation of Duties

Pattern 4 — Core Business Process Transformation

  • 2.11 Control 2.11: Bias Testing and Fairness Assessment
  • 2.12 Control 2.12: Supervision and Oversight (FINRA Rule 3110)
  • 2.6 Control 2.6: Model Risk Management (OCC Bulletin 2026-13 / Fed SR 26-2)

Pattern 5 — External Engagement

  • 1.19 Control 1.19: eDiscovery for Agent Interactions
  • 2.11 Control 2.11: Bias Testing and Fairness Assessment
  • 2.12 Control 2.12: Supervision and Oversight (FINRA Rule 3110)
  • 2.19 Control 2.19: Customer AI Disclosure and Transparency
  • 2.26 Control 2.26: Entra Agent ID — Identity Governance for Agents
  • 4.4 Control 4.4: Guest and External User Access Controls

Pattern 6 — AI-First Capabilities

  • 2.17 Control 2.17: Multi-Agent Orchestration Limits
  • 2.20 Control 2.20: Adversarial Testing and Red Team Framework
  • 3.14 Control 3.14: Agent 365 Observability SDK and Custom Agent Telemetry
  • 3.9 Control 3.9: Microsoft Sentinel Integration

Solutions per pattern

The following companion solutions in FSI-AgentGov-Solutions declare support for each pattern (via applicable_patterns frontmatter in each solution README).

Pattern 1 — Employee AI Enablement

Pattern 2 — Business Expert Empowerment

Pattern 3 — Workplace & IT Services

Pattern 4 — Core Business Process Transformation

Pattern 5 — External Engagement

Pattern 6 — AI-First Capabilities

Per-pillar control × pattern matrix

Pillar 1 — Security (29 controls)

Control Title P1 P2 P3 P4 P5 P6 Critical For
1.1 Control 1.1: Restrict Agent Publishing by Authorization 🎯 ✅ ✅ ✅ ✅ ✅ P1
1.10 Control 1.10: Communication Compliance Monitoring ✅ ✅ ✅ ✅ ✅ ✅ —
1.11 Control 1.11: Conditional Access and Phishing-Resistant MFA ✅ ✅ ✅ ✅ ✅ ✅ —
1.12 Control 1.12: Insider Risk Detection and Response ✅ ✅ ✅ ✅ ✅ ✅ —
1.13 Control 1.13: Sensitive Information Types (SITs) and Pattern Recognition ✅ ✅ ✅ ✅ ✅ ✅ —
1.14 Control 1.14: Data Minimization and Agent Scope Control ✅ ✅ ✅ ✅ ✅ ✅ —
1.15 Control 1.15: Encryption: Data in Transit and at Rest ✅ ✅ ✅ ✅ ✅ ✅ —
1.16 Control 1.16: Information Rights Management (IRM) for Documents ✅ ✅ ✅ ✅ ✅ ✅ —
1.17 Control 1.17: Endpoint Data Loss Prevention (Endpoint DLP) ✅ ✅ ✅ ✅ ✅ ✅ —
1.18 Control 1.18: Application-Level Authorization and Role-Based Access Control (RBAC) ✅ ✅ ✅ ✅ ✅ ✅ —
1.19 Control 1.19: eDiscovery for Agent Interactions ✅ ✅ ✅ ✅ 🎯 ✅ P5
1.2 Control 1.2: Agent Registry and Integrated Apps Management ✅ ✅ ✅ ✅ ✅ ✅ —
1.20 Control 1.20: Network Isolation and Private Connectivity ✅ ✅ ✅ ✅ ✅ ✅ —
1.21 Control 1.21: Adversarial Input Logging ✅ ✅ ✅ ✅ ✅ ✅ —
1.22 Control 1.22: Information Barriers for AI Agents ✅ ✅ ✅ ✅ ✅ ✅ —
1.23 Control 1.23: Step-Up Authentication for AI Agent Operations ✅ ✅ ✅ ✅ ✅ ✅ —
1.24 Control 1.24: Defender AI Security Posture Management (AI-SPM) ✅ ✅ ✅ ✅ ✅ ✅ —
1.25 Control 1.25: MIME Type Restrictions for File Uploads ✅ ✅ ✅ ✅ ✅ ✅ —
1.26 Control 1.26: Agent File Upload and File Analysis Restrictions ✅ ✅ ✅ ✅ ✅ ✅ —
1.27 Control 1.27: AI Agent Content Moderation Enforcement ✅ ✅ ✅ ✅ ✅ ✅ —
1.28 Control 1.28: Policy-Based Agent Publishing Restrictions ✅ ✅ ✅ ✅ ✅ ✅ —
1.29 Control 1.29: Global Secure Access: Network Controls for Copilot Studio Agents ✅ ✅ ✅ ✅ ✅ ✅ —
1.3 Control 1.3: SharePoint Content Governance and Permissions ✅ ✅ ✅ ✅ ✅ ✅ —
1.4 Control 1.4: Advanced Connector Policies (ACP) ✅ ✅ ✅ ✅ ✅ ✅ —
1.5 Control 1.5: Data Loss Prevention (DLP) and Sensitivity Labels ✅ ✅ ✅ ✅ ✅ ✅ —
1.6 Control 1.6: Microsoft Purview DSPM for AI ✅ ✅ ✅ ✅ ✅ ✅ —
1.7 Control 1.7: Comprehensive Audit Logging and Compliance ✅ ✅ ✅ ✅ ✅ ✅ —
1.8 Control 1.8: Runtime Protection and External Threat Detection ✅ ✅ ✅ ✅ ✅ ✅ —
1.9 Control 1.9: Data Retention and Deletion Policies ✅ ✅ ✅ ✅ ✅ ✅ —

Pillar 2 — Management (26 controls)

Control Title P1 P2 P3 P4 P5 P6 Critical For
2.1 Control 2.1: Managed Environments ✅ ✅ ✅ ✅ ✅ ✅ —
2.10 Control 2.10: Patch Management and System Updates ✅ ✅ ✅ ✅ ✅ ✅ —
2.11 Control 2.11: Bias Testing and Fairness Assessment ✅ ✅ ✅ 🎯 🎯 ✅ P4, P5
2.12 Control 2.12: Supervision and Oversight (FINRA Rule 3110) ✅ ✅ ✅ 🎯 🎯 ✅ P4, P5
2.13 Control 2.13: Documentation and Record Keeping ✅ ✅ ✅ ✅ ✅ ✅ —
2.14 Control 2.14: Training and Awareness Program 🎯 ✅ ✅ ✅ ✅ ✅ P1
2.15 Control 2.15: Environment Routing and Auto-Provisioning ✅ ✅ ✅ ✅ ✅ ✅ —
2.16 Control 2.16: RAG Source Integrity Validation ✅ 🎯 ✅ ✅ ✅ ✅ P2
2.17 Control 2.17: Multi-Agent Orchestration Limits ✅ ✅ ✅ ✅ ✅ 🎯 P6
2.18 Control 2.18: Automated Conflict of Interest Testing ✅ ✅ ✅ ✅ ✅ ✅ —
2.19 Control 2.19: Customer AI Disclosure and Transparency ✅ ✅ ✅ ✅ 🎯 ✅ P5
2.2 Control 2.2: Environment Groups and Tier Classification ✅ ✅ ✅ ✅ ✅ ✅ —
2.20 Control 2.20: Adversarial Testing and Red Team Framework ✅ ✅ ✅ ✅ ✅ 🎯 P6
2.21 Control 2.21: AI Marketing Claims and Substantiation ✅ ✅ ✅ ✅ ✅ ✅ —
2.22 Control 2.22: Inactivity Timeout Enforcement ✅ ✅ ✅ ✅ ✅ ✅ —
2.23 Control 2.23: User Consent and AI Disclosure Enforcement ✅ ✅ ✅ ✅ ✅ ✅ —
2.24 Control 2.24: Agent Feature Enablement and Restriction Governance ✅ ✅ ✅ ✅ ✅ ✅ —
2.25 Control 2.25: Microsoft Agent 365 — Admin Center Governance Console ✅ ✅ ✅ ✅ ✅ ✅ —
2.26 Control 2.26: Entra Agent ID — Identity Governance for Agents ✅ ✅ ✅ ✅ 🎯 ✅ P5
2.3 Control 2.3: Change Management and Release Planning ✅ ✅ ✅ ✅ ✅ ✅ —
2.4 Control 2.4: Business Continuity and Disaster Recovery ✅ ✅ ✅ ✅ ✅ ✅ —
2.5 Control 2.5: Testing, Validation, and Quality Assurance ✅ ✅ ✅ ✅ ✅ ✅ —
2.6 Control 2.6: Model Risk Management (OCC Bulletin 2026-13 / Fed SR 26-2) ✅ ✅ ✅ 🎯 ✅ ✅ P4
2.7 Control 2.7: Vendor and Third-Party Risk Management ✅ ✅ ✅ ✅ ✅ ✅ —
2.8 Control 2.8: Access Control and Segregation of Duties ✅ ✅ 🎯 ✅ ✅ ✅ P3
2.9 Control 2.9: Agent Performance Monitoring and Optimization ✅ ✅ ✅ ✅ ✅ ✅ —

Pillar 3 — Reporting (14 controls)

Control Title P1 P2 P3 P4 P5 P6 Critical For
3.1 Control 3.1: Agent Inventory and Metadata Management ✅ ✅ ✅ ✅ ✅ ✅ —
3.10 Control 3.10: Hallucination Feedback Loop ✅ ✅ ✅ ✅ ✅ ✅ —
3.11 Control 3.11: Centralized Agent Inventory Enforcement ✅ ✅ ✅ ✅ ✅ ✅ —
3.12 Control 3.12: Agent Governance Exception and Override Management ✅ ✅ ✅ ✅ ✅ ✅ —
3.13 Control 3.13: Agent 365 Admin Center Analytics and Reporting ✅ ✅ ✅ ✅ ✅ ✅ —
3.14 Control 3.14: Agent 365 Observability SDK and Custom Agent Telemetry ✅ ✅ ✅ ✅ ✅ 🎯 P6
3.2 Control 3.2: Usage Analytics and Activity Monitoring ✅ ✅ ✅ ✅ ✅ ✅ —
3.3 Control 3.3: Compliance and Regulatory Reporting ✅ ✅ ✅ ✅ ✅ ✅ —
3.4 Control 3.4: Incident Reporting and Root Cause Analysis ✅ ✅ ✅ ✅ ✅ ✅ —
3.5 Control 3.5: Cost Allocation and Budget Tracking ✅ ✅ ✅ ✅ ✅ ✅ —
3.6 Control 3.6: Orphaned Agent Detection and Remediation ✅ ✅ ✅ ✅ ✅ ✅ —
3.7 Control 3.7: PPAC Security Posture Assessment ✅ ✅ ✅ ✅ ✅ ✅ —
3.8 Control 3.8: Copilot Hub and Governance Dashboard ✅ ✅ ✅ ✅ ✅ ✅ —
3.9 Control 3.9: Microsoft Sentinel Integration ✅ ✅ ✅ ✅ ✅ 🎯 P6

Pillar 4 — SharePoint (9 controls)

Control Title P1 P2 P3 P4 P5 P6 Critical For
4.1 Control 4.1: SharePoint Information Access Governance (IAG) / Restricted Content Discovery ✅ ✅ ✅ ✅ ✅ ✅ —
4.2 Control 4.2: Site Access Reviews and Certification ✅ ✅ ✅ ✅ ✅ ✅ —
4.3 Control 4.3: Site and Document Retention Management ✅ ✅ ✅ ✅ ✅ ✅ —
4.4 Control 4.4: Guest and External User Access Controls ✅ ✅ ✅ ✅ 🎯 ✅ P5
4.5 Control 4.5: SharePoint Security and Compliance Monitoring ✅ ✅ ✅ ✅ ✅ ✅ —
4.6 Control 4.6: Grounding Scope Governance ✅ ✅ ✅ ✅ ✅ ✅ —
4.7 Control 4.7: Microsoft 365 Copilot Data Governance ✅ ✅ ✅ ✅ ✅ ✅ —
4.8 Control 4.8: Item-Level Permission Scanning for Agent Knowledge Sources ✅ ✅ ✅ ✅ ✅ ✅ —
4.9 Control 4.9: Embedded File Content Governance ✅ ✅ ✅ ✅ ✅ ✅ —