MITRE ATLAS Coverage

SOC 2 Type II: Continuous monitoring evidence
EU AI Act: Article 9 risk management, Article 15 accuracy
ISO 27001: A.12.4 logging and monitoring
NIST AI RMF: Govern, Map, Measure, Manage functions

AegisGate maps all security detections to the MITRE ATLAS (Adversarial Threat Landscape for Artificial-Intelligence Systems) framework.

Tactic	AegisGate Coverage	Controls
Reconnaissance	✅ Full	IOC library, supply chain scanning
Resource Development	✅ Full	Model integrity verification, dependency scanning
Initial Access	✅ Full	Prompt injection detection, auth enforcement
Execution	✅ Full	Response filtering, content classification
Persistence	⚠️ Partial	Configuration integrity checks
Defense Evasion	✅ Full	ML-based detection, adversarial training
Credential Access	✅ Full	PII redaction, secret detection
Discovery	✅ Full	Rate anomaly detection, access pattern monitoring
Lateral Movement	✅ Full	A2A/ACP/ANP protocol enforcement
Collection	✅ Full	Data exfiltration prevention, DLP patterns
Command and Control	⚠️ Partial	Network anomaly detection
Exfiltration	✅ Full	PII redaction, response filtering
Impact	✅ Full	Rate limiting, resource budgets

AegisGate generates ATLAS-mapped audit evidence for each detection, supporting: