Bidda Sovereign Intelligence · 10,099 Verified Nodes · 39 Sovereign Pillars

MITRE ATLAS Mitigation Control Access to AI Models and Data at Rest (AML.M0005) - Access Controls on AI Model Registries, Production Models, and Training Data

This node operationalises MITRE ATLAS mitigation AML.M0005 (Control Access to AI Models and Data at Rest). Establish access controls on internal model…

What MITRE ATLAS Mitigation Control Access to AI Models and Data at Rest (AML.M0005) - Access Controls on AI Model Registries, Production Models, and Training Data requires

This node operationalises MITRE ATLAS mitigation AML.M0005 (Control Access to AI Models and Data at Rest). Establish access controls on internal model registries and limit internal access to production models. Limit access to training data only to approved users. It maps the mitigation to EU AI Act, NIST AI RMF, and ISO/IEC 42001 obligations and drives a 10-gate verification workflow that an AI agent can execute against any production system.

Pillar: AI Governance & Law · Authority: MITRE Corporation · Version: 1.0.1 · Last updated:

Primary source: https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/ATLAS.yaml

SHA-256 integrity: 9bbd520e802b9f67fb5c8a0c988619184d00074e61a58e4208dadc7e80c1a87a

Primary Citations — 7 traced to source

  • MITRE ATLAS - Control Access to AI Models and Data at Rest (AML.M0005), https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/ATLAS.yaml#AML.M0005, AML.M0005 technique entry, 2026
  • EU AI Act - Regulation (EU) 2023/1689 on Artificial Intelligence, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689, Article 15 (Accuracy, Robustness, Cybersecurity), 2024

+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.

Access

⚠ Important: Human Verification Required

Bidda compliance nodes are reference intelligence, not legal advice. Every node must be reviewed by a qualified compliance professional or legal counsel before implementation in any enterprise workflow, regulated system, or compliance programme. See bidda.com/disclaimer for full terms.