Industry starterIndustry-Specific

Defense (U.S.) policy template

Review this template's scope and control areas. Then, open it in the Verdictan console to adapt and test the configuration for your environment.

Start with controls for AI systems that may handle controlled unclassified information or export-regulated data. The template checks International Traffic in Arms Regulations and Export Administration Regulations patterns. It also provides screening inputs, access mappings, review rules and retention settings. Validate the controls in an eligible air-gapped or high-assurance environment.

Use this template as a starting configuration and control map. It does not provide certification, legal advice or a compliance guarantee. Confirm your obligations, adapt the configuration and test every outcome before deployment.

Regions

US

Source references

8 source references

Control areas

5 mapped control areas

Deployment options

Fully air-gapped, Sovereign region

Source frameworks, standards and obligations

ITAR (22 CFR 120-130)EAR (15 CFR 730-774)NIST SP 800-53 Rev. 5DoD Directive 3000.09, Autonomy in Weapon Systems (2023)DoD AI Ethical PrinciplesFedRAMP HighDFARS 252.204-7012 (Safeguarding Covered Defense Information and Cyber Incident Reporting)DFARS 252.204-7021 (Cybersecurity Maturity Model Certification Level Requirements)

Control areas mapped by this template

Access control
Data encryption
Audit logging
Export control
Human oversight

Deployment options

Fully air-gapped
Sovereign region

Adapt the template in three steps

1

Review the scope

Confirm that the regions, source references, control areas and deployment options fit your use case.

2

Adapt the configuration

Open the template in the Verdictan console. Set its policies, thresholds, routing and review requirements for your environment.

3

Test before deployment

Test each policy outcome. Confirm that allowed, redacted, blocked and reviewed requests behave as expected.