K05 assurance architecture
Technical Controls
Direct answer
K05 publishes vendor-neutral controls organized around authority, consequences, architecture, identity, supply chain, OT, power, autonomy, physical protection, recovery, and evidence. Every framework mapping includes an applicability boundary.
Evidence boundary. These records describe architecture, control relationships, test requirements, and legal-source status. They do not certify a facility, authorize a mission, prove deployment, or replace current facility-specific engineering and legal review.
Control families
Architecture
3 control records
Autonomy
4 control records
Evidence
3 control records
Governance
3 control records
Identity
2 control records
Management Plane
2 control records
OT/Nuclear
3 control records
Operations
1 control records
Physical Protection
4 control records
Power/Cooling
2 control records
Recovery
2 control records
Supply Chain
2 control records
Timing
1 control records
Mapping rule
A mapping states that a control may implement, support, or be informed by a source. It does not assert that the source universally applies, that the implementation conforms, or that a regulator or customer has accepted it.