LATIDIA · Ciberseguridad

El efecto amplificador: riesgos del factor humano de la correlación sugerida por la IA y la autopropagación en la autoevaluación de GRC de marcos múltiples

arXiv: 2610.07866v1Tipo de anuncio: nuevo Resumen: Las plataformas de gobernanza, riesgo y cumplimiento (GRC) de marcos múltiples automatizan cada vez más el vínculo entre la respuesta de autoevaluación de una organización y la obligación de cumplimiento

La noticia

arXiv:2610.07866v1 Announce Type: new Abstract: Multi-framework Governance, Risk and Compliance (GRC) platforms increasingly automate the link between an organisation's self-assessment answer and the compliance obligations that answer is said to satisfy. Cross-framework control mapping, AI-suggested question correlation, and automatic propagation of answers and evidence across correlated questions all serve the legitimate efficiency goal of reducing duplicate work for small and medium-sized enterprises under the EU Cyber Resilience Act, NIS2 and GDPR. The same mechanisms, however, amplify the consequences of any human-factor bias in a single answer: one optimistically-graded control, one rubber-stamped attestation, or one AI-drafted answer can be silently replicated as evidence of compliance with many obligations across multiple frameworks.