Explains the regulatory requirements register
Each obligation records its source provision, the data it applies to, the control that meets it, an owner and evidence (ISO/IEC 27001:2022 4.2 and A.5.31; DMBOK2 ch. 7).
Can AI do this?
AI does this well Most of the tested AI models master this. 3 of 4 models in the current benchmark master it.
| Model | Tier | Probability of mastery | Status |
|---|---|---|---|
| gemini-4-argon | Flagship | 100% | Mastered |
| gemini-3.5-flash-lite | Low cost | 87% | Not shown |
| gpt-6-luna | Low cost | 100% | Mastered |
| claude-haiku-5-5 | Low cost | 100% | Mastered |
Mastered means a probability of at least 90% that the model has this knobit, estimated from its graded answers. “Not shown” means the answers do not settle it either way. How the models are tested.
What it looks like in practice
Expected result: Each obligation records its source provision, the data it applies to, the control that meets it, an owner and evidence (ISO/IEC 27001:2022 4.2 and A.5.31; DMBOK2 ch. 7).
How it is assessed: Answers a written question on the requirements register correctly
Related knobits
Needed for
- G-403 Recognises a control with no evidence
- S-101 Recognises a requirement with no control
- S-103 Recognises a requirement with no data scope
- S-105 Recognises a requirement or control with no owner
All 17 knobits of Register regulatory security requirements.
Source: Practice the stage 1 reference and review checklist rest on