Attestation Reports

Regulator-ready PDF that maps CALIBRE controls to six frameworks in one document.

In the sidebar: Regulatory > Attestations

What it is

For any assessed initiative, generates a 10-14 page PDF covering coverage against NIST AI RMF, ISO/IEC 42001, EU AI Act (Articles 8-17 for high-risk), MITRE ATLAS, OWASP Top 10 for LLM Applications (2025), and ISO/IEC 27001. Includes evidence log, active amplifiers, and a tamper-evident content hash.

When to use

APRA or ASIC review: hand the auditor a report per AI system.
Board pack: attach the PDF as the audit-trail evidence.
Client due diligence: prospective clients ask 'is your AI governed?', this is the answer.

Walk-through

1Sidebar: Regulatory > Attestations.
2Pick an initiative from the list.
3Configure the report: assessor name, owner, classification (Standard / High-Risk / Limited-Risk for EU AI Act).
4Click Generate. 2-second PDF appears. Content hash and doc ID recorded for tamper-evidence.

Common pitfalls

Marking every system as High-Risk. Only EU AI Act Annex III use cases qualify.
Treating the report as a statutory audit. It is decision support; a certified auditor is still needed for legal sign-off.