Digital systems, cyber threats and AI models now sit inside the records and decisions of every other system. This subsite relates cyber resilience, AI governance, telecommunications and model documentation standards so that a model, a dataset or an incident can be identified, described and verified. Every artifact of these areas carries a UNI (Unique Nexus Identifier), which identifies and never certifies.
nexustandards.com/digital-ai/nexqArea entries are PROPOSED; publishing waits for the owner's go.
Nexus Standards (2026). Digital, Cyber and AI: master subsite of the Nexus Standards (PROPOSED areas). https://nexustandards.com/digital-ai/. Last reviewed 2026-10-17.
Files carry the credits and the licence line; they are generated in your browser and nothing is sent. Downloads need script.
Every area of the subsite with its tier, status, the Nexus Standards it lists, the open standards it names, its feeds and its couplings. Area entries are PROPOSED; registry rows are named where they exist.
Area index3 of 9 areas have a registry row; the rest are proposed areas with a full context entry and no registry row yet. Feed counts include sources pending admission.
47 coupling rows join this subsite's areas to 12 other subsites, counted from the systemicContext rows of the area context bank in both directions. Select a card on the canvas to trace it.
Fig.Edge labels count coupling rows. GATE marks a subsite, DONE and RUNNING an area of this subsite. Tags give reading order only. Design, not a record.
| Coupled subsite | Rows | Example mechanism |
|---|---|---|
| Energy and Critical Infrastructure | 9 | Grid control depends on telecom networks and telecom sites depend on grid power and backup fuel, a two-way dependency that turns a single outage into a cascade.Energy utilities and grids to Digital, telecom and platforms |
| Finance, Insurance and the Economy | 7 | Banks depend on critical ICT third parties whose outages are operational-resilience events.Banking to Digital, telecom and platforms |
| Governance, Security and Society | 5 | Common driver: intrusion and influence operations combine in hybrid campaigns.Cyber and digital risk standards to Information integrity and trust |
| Industry, Trade and Supply Chains | 5 | Operational-technology networks and industrial software supply chains carry cyber risk into physical processes.Industry and manufacturing to Digital, telecom and platforms |
| Systemic Risks | 5 | Mechanism: some frontier technologies carry catastrophic tail risk.Frontier technology risk standards to Global catastrophic and existential risk standards |
| Trust, Verification and Assurance | 5 | Risk-tier obligations become NS-10 clauses evaluated by NS-11 attestations in the Trust, Verification and Assurance subsite, with INDETERMINATE where evidence is missing.AI governance frameworks alignment to Trust, Verification and Assurance |
| Hazards and Disaster Risk Reduction | 4 | Common driver: GNSS jamming and spoofing are deliberate interference threats.Space weather, spectrum and timing risk standards to Cyber and digital risk standards |
| Early Warning and Anticipatory Action | 2 | ITU-T X.1303 bis specifies CAP 1.2; the alerting area profiles CAP once, citing both OASIS and ITU-T publications.ITU and digital connectivity to Alerting and messaging |
Standards that applyA filled cell means the area's context entry lists that Nexus Standard. Context entries are PROPOSED; no cell is a conformance, certification or readiness statement.
Open Earth observation layers framed on north america, as an example geography for digital, cyber and ai: context for where its records live, never an assessment and never a statement of where the standards apply. Layers, dates and credits are on the map.
The interactive map needs JavaScript; the layer list and sources are below.
Layers 2
Connected activity
Keyboard, with the map focused
Hold Ctrl or ⌘ and scroll to zoom
Latest available
NASA GIBS / EOSDIS · ASTER GDEM (METI, NASA) · Blue Marble (NASA) · © OpenStreetMap contributors (ODbL) · Natural Earth
Loading the latest NASA imagery.
Drag to move. Ctrl or ⌘ and scroll, pinch or the buttons to zoom; hover for the values under the pointer; reset returns to the region.
Night-time lights and population density, the footprint of electrified, connected activity, framed on North America.Satellite and model products as NASA publishes them, each with its own date; indicators, not assessments of any place; claim ceiling INTEGRATED.
Layers and dates
Provider, licence, delivery path and register status for each source. A source is live on a public page only after an owner decision admits it; until then it reads pending admission.
No legal register row admits any of these sources for live display on public pages yet, so nothing is read from them here. A register row that exists records the source for the governed GRIx path; admission for public pages is a separate owner decision.
OECD.AI national AI policies and initiatives databasepending admission
OECD · continuous
OECD terms and conditions (CC BY 4.0 unless otherwise stated)
build-time snapshotregister row exists
WMO Alert Hub and Register of Alerting Authoritiespending admission
World Meteorological Organization · real time
WMO Unified Data Policy plus each alerting authority's terms
GRIx governed readregister row exists
World Bank Open Data and World Development Indicators APIpending admission
World Bank · quarterly
CC BY 4.0 for most datasets; Foundry register: LEGAL_REVIEW_REQUIRED
GRIx governed readregister row exists
World Development Indicatorspending admission
World Bank · annual with quarterly updates
CC BY 4.0
GRIx governed readregister row exists
AI Incident Databasepending admission
Responsible AI Collaborative · continuous
CC BY-SA 4.0 (incident records)
build-time snapshotproposed register row
CISA Known Exploited Vulnerabilities cataloguepending admission
Cybersecurity and Infrastructure Security Agency · on update
U.S. Government work (public domain in the United States)
GRIx governed readproposed register row
EUR-Lex Cellar (EU legal acts and delegated acts)pending admission
Publications Office of the European Union · daily
Commission Decision 2011/833/EU reuse policy (free reuse with acknowledgement)
build-time snapshotproposed register row
EUR-Lex Cellar (EU legal acts in machine-readable form)pending admission
Publications Office of the European Union · daily
Commission Decision 2011/833/EU reuse policy (free reuse with acknowledgement)
build-time snapshotproposed register row
Hugging Face Hub API (model metadata)pending admission
Hugging Face · continuous
Hub terms of service; each model's own licence governs
Nexus Foundry pluginproposed register row
ITU DataHub ICT indicatorspending admission
International Telecommunication Union · annual
CC BY-NC-SA 3.0 IGO (ITU DataHub terms; third-party series under their owners' terms)
build-time snapshotproposed register row
ITU ICT statisticspending admission
International Telecommunication Union · annual
ITU terms (key ICT indicators free to access; licence to be confirmed)
build-time snapshotproposed register row
Known Exploited Vulnerabilities cataloguepending admission
U.S. Cybersecurity and Infrastructure Security Agency · daily
U.S. Government work, public domain
GRIx governed readproposed register row
MITRE ATT&CK knowledge base (STIX 2.1)pending admission
The MITRE Corporation · semi-annual releases
MITRE ATT&CK terms of use (royalty-free licence with attribution)
build-time snapshotproposed register row
National Vulnerability Database (CVE enrichment API)pending admission
NIST · continuous
U.S. Government work, public domain
GRIx governed readproposed register row
NIST National Vulnerability Database APIspending admission
NIST · continuous
U.S. Government work (public domain in the United States)
GRIx governed readproposed register row
OECD.AI policy observatorypending admission
OECD · periodic
OECD terms and conditions
build-time snapshotproposed register row
OSV open source vulnerability databasepending admission
OSV project (Google, OpenSSF) · continuous
Per-source licences; OSV schema CC BY 4.0
GRIx governed readproposed register row
Our World in Data datasetspending admission
Global Change Data Lab (Our World in Data) · varies
CC BY 4.0 for OWID-produced data; third-party data keep their licences
build-time snapshotproposed register row
UN SDG Global Database API (indicators 9.c.1, 17.6.1, 17.8.1)pending admission
UN Statistics Division · annual
United Nations terms of use (free reuse with attribution)
GRIx governed readproposed register row
Cyber and digital risk standards · GCRI Canada may admit incident and vulnerability records with source, timestamp and verification status as research evidence on digital systemic risk; GCRI Canada decides under its own evidence and research rules, and no approval is…
AI and autonomous systems risk standards · GCRI Canada may admit evaluation and incident records with method, version and evaluator as research evidence; GCRI Canada decides under its own evidence and research rules, and no approval is implied.
Frontier technology risk standards · GCRI Canada may admit horizon-scanning and readiness records with source and method as research evidence; GCRI Canada decides under its own evidence and research rules, and no approval is implied.
6 more areas state what this pathway reads; each area page has its own line.
Cyber and digital risk standards · GRF may record organisations that publish attestations and advisories on the shared profiles as a trust dialogue item; GRF decides under its own recognition rules, and no recognition or endorsement is implied.
AI and autonomous systems risk standards · GRF may record organisations publishing model documentation on the shared profile as a dialogue item; GRF decides under its own recognition rules, and no recognition or endorsement is implied.
Frontier technology risk standards · GRF may record institutions that publish transition plans on the shared records as a dialogue item; GRF decides under its own recognition rules, and no recognition or endorsement is implied.
6 more areas state what this pathway reads; each area page has its own line.
Cyber and digital risk standards · GRA may read supply-chain attestation and control-evidence records when it considers digital risk in investments; GRA decides under its own capital-readiness rules, and no approval, rating or investment view is implied.
AI and autonomous systems risk standards · GRA may read AI risk-tier and evaluation records when it considers AI-dependent investments; GRA decides under its own capital-readiness rules, and no approval, rating or investment view is implied.
Frontier technology risk standards · GRA may read transition-readiness records when it considers technology risk in investments; GRA decides under its own capital-readiness rules, and no approval, rating or investment view is implied.
6 more areas state what this pathway reads; each area page has its own line.
Each institution decides under its own rules what it reads as evidence; no pathway is an approval, a readiness statement or investment advice.
Indicator names and codes as their stewards publish them; values appear only from a governed GRIx source, never typed into a page.
Each area proposes a working group with a scope, deliverables and liaison targets; a liaison is sought, never claimed, until the body confirms it in writing.
| Area | Working group scope | Deliverables | Liaison sought |
|---|---|---|---|
| Cyber and digital risk standards | Threat, vulnerability, attestation and incident records on open exchange formats, with control evidence for verification. | 3 | 4OASIS Cyber Threat Intelligence TC, OpenSSF, FIRST, ENISA |
| AI and autonomous systems risk standards | Model, evaluation, incident and deployment-context records crosswalked to AI governance frameworks. | 3 | 4NIST AI Safety Institute Consortium, OECD.AI Network of Experts, MLCommons, Partnership on AI |
| Frontier technology risk standards | Horizon-scanning, readiness and safeguard records for frontier technologies, without hazardous detail. | 3 | 4OECD Working Party on Bio-, Nano- and Converging Technologies, NIST Post-Quantum Cryptography project, WHO Science… |
| Digital, telecom and platforms | Profile outage, warning-delivery, cyber and software supply-chain records for operators and platforms and crosswalk them to ITU, 3GPP and cyber instruments. | 3 | 4ITU-T Study Group 17, ITU-D Emergency Telecommunications, 3GPP, GSMA |
| Cyber resilience and digital operational resilience | Records for ICT dependencies, testing and incidents with verification. | 3 | 4ENISA, FSB, FIRST, OpenSSF |
| AI governance frameworks alignment | Maintain the obligation-level crosswalk and AI clause library, tracking implementing acts, codes of practice and harmonised standards as they are published. | 3 | 3OECD.AI Policy Observatory (information exchange sought; none recorded), NIST AI programme (information exchange on AI… |
| Cyber and digital resilience law alignment | Maintain the cyber law crosswalk and clause library, tracking implementing acts, regulatory technical standards and guidance. | 3 | 3ENISA (information exchange sought; none recorded), NIST Cybersecurity Framework programme (information exchange… |
| ITU and digital connectivity | Describe ITU's public technical work accurately and develop connectivity and alert-dissemination profiles. | 2 | 2ITU-D Emergency Telecommunications division (information exchange sought; none recorded), ITU-T Study Group 17… |
| AI, models and agents | Records for models, evaluations and agents used in risk products. | 3 | 4MLCommons, OECD.AI network of experts, NIST AI Safety Institute consortium, CEN-CENELEC JTC 21 via a national member |
Pick an area above, adopt its proposed charter and file it as a docket under NS-13; editors decide with written reasons. Develop a standard
Every area entry is PROPOSED: a pull request against the area context bank names the change and its source, peer-reviewed or published statistics.
Propose a feed with provider, licence and delivery path; Legal/IP records the terms and the owner decides admission. Agents never admit a source.
Contribute to an external standard through its own body's channels; the outcome comes back here as a register change. Movement and contribution
Peer-reviewed sources and published statistics as the area entries cite them, newest first within each type.
The Nexus Risk Standards read in Digital, Cyber and AI, the NHS-1 hazard domains it carries and its library: scope, codes, schemas, conformance, governance, templates, crosswalks, change log and how to contribute.
A, H, I, K, M, P, T and U
NHS-1 cyber6 families
NHS-1 tech16 families
LibraryRisk Academy disciplines that teach Digital, Cyber and AI, with their courses; the GCRI Canada, The Global Risks Forum (GRF) and The Global Risks Alliance (GRA) subsites that carry those disciplines; and the Nexus Foundry systems the standards name. Mappings are proposed for review (Risk Academy standards map, 2026-10-17); a link says a page on the same subject exists, never an endorsement or a conformance statement; framework names in course titles are named and linked, never reproduced.
Charter a working group, correct a brief or name a source. Area entries are PROPOSED content for the Nexus Standards registry; a UNI identifies and never certifies, and nothing on this site is a certification, an approval or a readiness statement.
Nexus Standards documents CC BY 4.0 · tooling Apache-2.0 · counsel review pending (DEC-2026-10-16-NEXUS-STANDARDS-OPEN-LICENCE). External standards are named and linked under their own licences; a UNI (Unique Nexus Identifier) identifies, it never certifies. · Generated from the Nexus Standards corpus at commit 437ae044c5cb (2026-10-17); proposed and open.