# Source Register

All web sources are official or primary sources where available.

- **NIST AI RMF:** https://www.nist.gov/itl/ai-risk-management-framework
- **NIST GenAI Profile:** https://www.nist.gov/publications/artificial-intelligence-risk-management-framework-generative-artificial-intelligence
- **NIST AIRC Core:** https://airc.nist.gov/airmf-resources/airmf/5-sec-core/
- **EU Article 50 Guidelines:** https://digital-strategy.ec.europa.eu/en/library/guidelines-transparency-obligations-providers-and-deployers-ai-systems
- **EU Transparency Code:** https://digital-strategy.ec.europa.eu/en/policies/code-practice-ai-generated-content
- **ISO 27001:** https://www.iso.org/standard/27001
- **ISO 42001:** https://www.iso.org/standard/42001
- **AICPA TSC:** https://www.aicpa-cima.com/resources/download/2017-trust-services-criteria-with-revised-points-of-focus-2022
- **ICO Article 28:** https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/accountability-and-governance/contracts-and-liabilities-between-controllers-and-processors-multi/what-needs-to-be-included-in-the-contract/
- **OpenAI Enterprise Privacy:** https://openai.com/enterprise-privacy/
- **AWS Bedrock Security:** https://aws.amazon.com/bedrock/security-privacy-responsible-ai/
- **Gemini Enterprise Security:** https://docs.cloud.google.com/gemini/enterprise/docs/compliance-security-controls
- **Slack Security:** https://slack.com/trust/security
- **GitHub Data Residency:** https://docs.github.com/en/enterprise-cloud@latest/admin/data-residency/about-storage-of-your-data-with-data-residency
- **Lexi Terms:** https://www.getlexi.io/terms
- **Lexi Data Controls:** https://www.getlexi.io/data-controls
- **Lexi Privacy:** https://www.getlexi.io/privacy
- **Lexi Home:** https://www.getlexi.io/

## Compensation evidence used in positioning

- Modine Senior GRC Analyst, posted July 2026, estimated $100,000-$140,000, U.S.-remote with U.S. work authorization requirement: https://careers.modine.com/job/Senior-GRC-Analyst/9097-en_US/
- Astra GRC Analyst, U.S.-remote, $95,000-$135,000: https://jobs.ashbyhq.com/astra/07b241b9-b5c2-49cd-9687-60c7c21707f1
- Compyl Senior GRC Analyst, U.S.-remote, $115,000-$145,000: https://jobs.ashbyhq.com/compyl/62d91d65-099c-489c-baab-d5f0be149eca
- Doppler Senior GRC Analyst, U.S.-remote, $150,000-$185,000: https://jobs.ashbyhq.com/doppler/7dcb6231-86c0-4f84-b9fb-0f2ffd1d3117
- SecureSoft GRC Analyst / ISSO listing included a 1099 hourly range of $55-$62.50 depending on experience and U.S.-specific eligibility requirements: https://www.indeed.com/viewjob?jk=f97b0b38de3359ec