{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:BR72425QMDRLSL6J2BLKGEA7FN","short_pith_number":"pith:BR72425Q","canonical_record":{"source":{"id":"2402.15770","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CY","submitted_at":"2024-02-24T09:06:25Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"77e2b67f99d264e779ee999f49c5430e3778fc110c2c01fccfb5b3cd63e3a06c","abstract_canon_sha256":"b9e1fb0e31d860c49146dc56bd216eb7aaa0a1dd24a9f214046ca8bb6720fc82"},"schema_version":"1.0"},"canonical_sha256":"0c7fae6bb060e2b92fc9d056a3101f2b5e9797683e37ef772b6dc17c1fd0a36d","source":{"kind":"arxiv","id":"2402.15770","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.15770","created_at":"2026-07-05T08:35:42Z"},{"alias_kind":"arxiv_version","alias_value":"2402.15770v1","created_at":"2026-07-05T08:35:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.15770","created_at":"2026-07-05T08:35:42Z"},{"alias_kind":"pith_short_12","alias_value":"BR72425QMDRL","created_at":"2026-07-05T08:35:42Z"},{"alias_kind":"pith_short_16","alias_value":"BR72425QMDRLSL6J","created_at":"2026-07-05T08:35:42Z"},{"alias_kind":"pith_short_8","alias_value":"BR72425Q","created_at":"2026-07-05T08:35:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:BR72425QMDRLSL6J2BLKGEA7FN","target":"record","payload":{"canonical_record":{"source":{"id":"2402.15770","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CY","submitted_at":"2024-02-24T09:06:25Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"77e2b67f99d264e779ee999f49c5430e3778fc110c2c01fccfb5b3cd63e3a06c","abstract_canon_sha256":"b9e1fb0e31d860c49146dc56bd216eb7aaa0a1dd24a9f214046ca8bb6720fc82"},"schema_version":"1.0"},"canonical_sha256":"0c7fae6bb060e2b92fc9d056a3101f2b5e9797683e37ef772b6dc17c1fd0a36d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:35:42.500639Z","signature_b64":"Lv0TDJcaYdVZDCGxO9ktMe48AzXrKhnbTitZxeJpK6tGih9KzPseIsQdhHgx2MjFT2M+4omkfRvMuh+2Zlo8Cg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0c7fae6bb060e2b92fc9d056a3101f2b5e9797683e37ef772b6dc17c1fd0a36d","last_reissued_at":"2026-07-05T08:35:42.500216Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:35:42.500216Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.15770","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:35:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TUthxZxQVci1lA9L/HYgbXotG7Tr9C8JA0lMzbfCPfHfRT0Z4Gnf9Fl7Uaz2gDGS2U60NuJ6YnedgGJTn0o0Bw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T09:48:07.547034Z"},"content_sha256":"21ae9ca6233d408702d595e5840cf39093688419fc86f3e19ee6209240014878","schema_version":"1.0","event_id":"sha256:21ae9ca6233d408702d595e5840cf39093688419fc86f3e19ee6209240014878"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:BR72425QMDRLSL6J2BLKGEA7FN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"From COBIT to ISO 42001: Evaluating Cybersecurity Frameworks for Opportunities, Risks, and Regulatory Compliance in Commercializing Large Language Models","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CY","authors_text":"Malka N. Halgamuge, Paul Watters, Raza Nowrozy, Teo Susnjak, Timothy R. McIntosh, Tong Liu","submitted_at":"2024-02-24T09:06:25Z","abstract_excerpt":"This study investigated the integration readiness of four predominant cybersecurity Governance, Risk and Compliance (GRC) frameworks - NIST CSF 2.0, COBIT 2019, ISO 27001:2022, and the latest ISO 42001:2023 - for the opportunities, risks, and regulatory compliance when adopting Large Language Models (LLMs), using qualitative content analysis and expert validation. Our analysis, with both LLMs and human experts in the loop, uncovered potential for LLM integration together with inadequacies in LLM risk oversight of those frameworks. Comparative gap analysis has highlighted that the new ISO 42001"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.15770","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.15770/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:35:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9dFNJbi87NgFvTTAKJGPmehtWiAoJUCH8YW3DXnETGOXpL/ddXawyVKZjoQGBd4nrBeFcSoNLMiTuDR+Q05fAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T09:48:07.547360Z"},"content_sha256":"bb4cafd94ae01bc987823541ca29235fa267beb0522c5b8c0e7f48439d8f797d","schema_version":"1.0","event_id":"sha256:bb4cafd94ae01bc987823541ca29235fa267beb0522c5b8c0e7f48439d8f797d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BR72425QMDRLSL6J2BLKGEA7FN/bundle.json","state_url":"https://pith.science/pith/BR72425QMDRLSL6J2BLKGEA7FN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BR72425QMDRLSL6J2BLKGEA7FN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T09:48:07Z","links":{"resolver":"https://pith.science/pith/BR72425QMDRLSL6J2BLKGEA7FN","bundle":"https://pith.science/pith/BR72425QMDRLSL6J2BLKGEA7FN/bundle.json","state":"https://pith.science/pith/BR72425QMDRLSL6J2BLKGEA7FN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BR72425QMDRLSL6J2BLKGEA7FN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:BR72425QMDRLSL6J2BLKGEA7FN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b9e1fb0e31d860c49146dc56bd216eb7aaa0a1dd24a9f214046ca8bb6720fc82","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CY","submitted_at":"2024-02-24T09:06:25Z","title_canon_sha256":"77e2b67f99d264e779ee999f49c5430e3778fc110c2c01fccfb5b3cd63e3a06c"},"schema_version":"1.0","source":{"id":"2402.15770","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.15770","created_at":"2026-07-05T08:35:42Z"},{"alias_kind":"arxiv_version","alias_value":"2402.15770v1","created_at":"2026-07-05T08:35:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.15770","created_at":"2026-07-05T08:35:42Z"},{"alias_kind":"pith_short_12","alias_value":"BR72425QMDRL","created_at":"2026-07-05T08:35:42Z"},{"alias_kind":"pith_short_16","alias_value":"BR72425QMDRLSL6J","created_at":"2026-07-05T08:35:42Z"},{"alias_kind":"pith_short_8","alias_value":"BR72425Q","created_at":"2026-07-05T08:35:42Z"}],"graph_snapshots":[{"event_id":"sha256:bb4cafd94ae01bc987823541ca29235fa267beb0522c5b8c0e7f48439d8f797d","target":"graph","created_at":"2026-07-05T08:35:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.15770/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"This study investigated the integration readiness of four predominant cybersecurity Governance, Risk and Compliance (GRC) frameworks - NIST CSF 2.0, COBIT 2019, ISO 27001:2022, and the latest ISO 42001:2023 - for the opportunities, risks, and regulatory compliance when adopting Large Language Models (LLMs), using qualitative content analysis and expert validation. Our analysis, with both LLMs and human experts in the loop, uncovered potential for LLM integration together with inadequacies in LLM risk oversight of those frameworks. Comparative gap analysis has highlighted that the new ISO 42001","authors_text":"Malka N. Halgamuge, Paul Watters, Raza Nowrozy, Teo Susnjak, Timothy R. McIntosh, Tong Liu","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CY","submitted_at":"2024-02-24T09:06:25Z","title":"From COBIT to ISO 42001: Evaluating Cybersecurity Frameworks for Opportunities, Risks, and Regulatory Compliance in Commercializing Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.15770","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:21ae9ca6233d408702d595e5840cf39093688419fc86f3e19ee6209240014878","target":"record","created_at":"2026-07-05T08:35:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b9e1fb0e31d860c49146dc56bd216eb7aaa0a1dd24a9f214046ca8bb6720fc82","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CY","submitted_at":"2024-02-24T09:06:25Z","title_canon_sha256":"77e2b67f99d264e779ee999f49c5430e3778fc110c2c01fccfb5b3cd63e3a06c"},"schema_version":"1.0","source":{"id":"2402.15770","kind":"arxiv","version":1}},"canonical_sha256":"0c7fae6bb060e2b92fc9d056a3101f2b5e9797683e37ef772b6dc17c1fd0a36d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0c7fae6bb060e2b92fc9d056a3101f2b5e9797683e37ef772b6dc17c1fd0a36d","first_computed_at":"2026-07-05T08:35:42.500216Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:35:42.500216Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Lv0TDJcaYdVZDCGxO9ktMe48AzXrKhnbTitZxeJpK6tGih9KzPseIsQdhHgx2MjFT2M+4omkfRvMuh+2Zlo8Cg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:35:42.500639Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.15770","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:21ae9ca6233d408702d595e5840cf39093688419fc86f3e19ee6209240014878","sha256:bb4cafd94ae01bc987823541ca29235fa267beb0522c5b8c0e7f48439d8f797d"],"state_sha256":"35c7ccb5c347d28376b3b969a03c43a627e209f2d38e5aa58855e395c3a88dee"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WgKZQG7d18Ob1hrnoW6z3IKpS9oDMqjBpsbWnwX6ZZnE0wyqSODAUC+Owp/a+/4pKeQd731zQNWR0qvGZYF6AQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T09:48:07.549964Z","bundle_sha256":"9f6e4a84a0adf5bb6006478ea96c5fc2c695262d5b9049908a54d68f5fab97d6"}}