KOREAN ASSOCIATION FOR ARTIFICIAL INTELLIGENCE AND LAW
Association Inquiries
KAAILKorean Association for Artificial Intelligence and LawArtificial Intelligence · Law · Policy

KAAIL · AI LAW & POLICY RESEARCH

From Audit to Continuous Control: Implementation Pathways, Governance, and Organizational Readiness for AI-Based Compliance in Critical Infrastructure

AI Summary Based on the Abstract: This abstract reports a qualitative synthesis on whether AI-based security posture management in critical infrastructure can shift NIST CSF compliance from periodic audits to continuous controls. An analysis of literature, government, standards, and industry materials identified eight themes, and argues that AI strengthens identify, protect, detect, respond, and recover functions and reduces the time between control failure and remediation

International ResearchCrossrefAI summary
Author

Abolaji Adebayo

Publication DateLanguage und

AI Research Summary

Before Human Review

Abstract-based · Full paper not reviewed · Not an official association position

Summary createdBrief updated

This abstract reports a qualitative synthesis on whether AI-based security posture management in critical infrastructure can shift NIST CSF compliance from periodic audits to continuous controls. An analysis of literature, government, standards, and industry materials identified eight themes, and argues that AI strengthens identify, protect, detect, respond, and recover functions and reduces the time between control failure and remediation. However, it assumes data and telemetry, workforce capability, alert fatigue management, OT integration, and governance for model risk, explainability, and accountability. This is an abstract-based summary; the full text was not reviewed.

Key Points from the Abstract

  1. It argues that AI supports continuous monitoring and real-time compliance.
  2. It sees AI as reducing the gap between control failure and remediation and improving audit readiness.
  3. It proposes a five-stage implementation pathway and a sociotechnical control system.

Relevance to AI Law and Policy

It has implications for the continuousization of critical infrastructure compliance, AI governance, and human-machine control design.

Limitations to Consider

  • It is a qualitative synthesis in the abstract; no quantitative effect size is provided.
  • Implementation effectiveness depends heavily on data/telemetry and organizational capability.
  • Because the full text was not reviewed, the rigor of the detailed methods and evidence cannot be assessed.

Please compare with the original text before citing or using it in your assessment.

Abstract Preview
Critical infrastructure (CI) operators face an escalating threat environment in which episodic, audit-based compliance v…
Read more in the abstract and original text

Research Topic

AI Governance

Original text and source

Original Title

From Audit to Continuous Control: Implementation Pathways, Governance, And Organizational Readiness For AI-Enabled Compliance in Critical Infrastructure

The Korean title on this page was translated by AI.
Journal or publication
International Journal of Computer Science and Mathematical Theory
Original publisher
IIARD Publication Co.
Database
Crossref
Original paperRead more in the original text
Research Trend List