RAND's proposed SL3 control catalog: controls adapted from NIST SP 800-53, targeted attack vectors and phasing period

Name: RAND's proposed SL3 control catalog: controls adapted from NIST SP 800-53, targeted attack vectors and phasing period
License: https://aidatacenterguide.com/terms#intellectual-property

262 controls / 31 vectors / 6–12 monthsobserved

Value kind	observed — Reported measurements, counts, and specifications keep the precision and scope stated by their source; an exact specification is not treated as a range.
Scope	Proposed control framework; not an assessment of any lab's conformance.
As of	2026-08-25
Source	RAND, Achieving AI Model Weight Security Level 3 (SL3), RR-A4704-1 (Aguirre, Robertson, Comer, Malone, Hurd), 25 August 2026
Review	checking…review by 2027-04-16 · slow cadence
Recorded changes	last 2026-10-16
Claim id	rand-sl3-catalog-262-controls-31-vectors

Where the guide uses it

11.8 Model & Weight Protection (At-Rest, In-Transit, In-Use)

← Full numbers register — every date-stamped figure in the guide, with revision history.