K06 assurance and procurement architecture
Digital-twin and AI-system assurance Official-Source Review
Direct answer
NIST IR 8356 addresses digital-twin cyber-security and trust considerations.
Authority and evidence boundary. K06 publishes reference architecture, source review, machine-checkable dependencies, procurement scope, and test-evidence formats. These records do not certify a facility, award a contract, authorize an operation, prove deployment, establish current operation, or transfer regulatory or command authority.
Supported bounded propositions
- NIST IR 8356 addresses digital-twin cyber-security and trust considerations.
- SP 800-218A adds AI-model-specific secure development practices.
- NIST is developing a critical-infrastructure AI RMF profile.
Unavailable or unresolved
- The critical-infrastructure profile is not final at the cutoff.
- A digital twin is not presumed faithful to a site outside its validated range.
Official source records
NIST IR 8356 — Security and Trust Considerations for Digital Twin Technology · NIST SP 800-218A — Secure Software Development Practices for Generative AI and Dual-Use Foundation Models · NIST AI RMF Profile on Trustworthy AI in Critical Infrastructure — Concept Note
Currentness qualification
Point-in-time review performed on 2026-08-15 against the cited official or first-party publication location. There is no public runtime monitor and no live-host observation. A reviewed publication does not decide facility applicability, legal interpretation, compliance, licensing, operational authority, or later currentness.