ThreatKrusher Emblem
ThreatKrusher Assurance Center
๐Ÿ” โŒ˜K
Search Results
Public Standard Ref: ETP-AC-STD-022 Ver: 1.0.0 Owner: AI Systems Architecture & SOC Leadership
โšก Direct Answer Summary (AI Overview / Key Takeaway)
Disclosure of automated heuristic scoring algorithms, human override mechanics, and bias avoidance safeguards.

eTrepid Automated Decision-Making & Algorithmic Transparency Notice

Governing Standard: NIST AI RMF / Algorithmic Transparency Directives

1. Notice Purpose and Scope

This notice explains where, how, and why eTrepid Inc. utilizes automated decision-making (ADM), automated scripts, and algorithmic models across its managed security services and diagnostic interfaces.

2. Operational Use Cases of Automated Systems

flowchart TD

subgraph UseCases ["Automated Operations"]

A["1. Threat Detection & Host Isolation (ThreatKrusher 24/7 SOC)"]

B["2. Vulnerability Correlation & Priority Scoring"]

C["3. Preliminary Compliance Scoring (60-SEC SPRS Diagnostic)"]

end

2.1 ThreatKrusher 24/7 SOC Automated Containment

  • Purpose: Rapid containment of active cyber threats (e.g., ransomware propagation or credential compromise).
  • Automated Actions: Automated network isolation of compromised hosts and blocking of confirmed malicious IP addresses at the perimeter.
  • Human Safeguard: Every automated containment action triggers an immediate alert to a Tier 2/3 SOC analyst for human verification within minutes.
  • 2.2 Preliminary Diagnostic Estimators (60-SEC SPRS Diagnostic)

  • Purpose: Calculates preliminary estimated SPRS score ranges and compliance readiness based on user-submitted parameters.
  • Automated Actions: Algorithmic calculation based on NIST SP 800-171 scoring weights.
  • Limitation: Estimates are informational heuristics and do not replace formal readiness reviews.
  • 3. Human Review and Appeal Rights

    Clients have the right to request human review and explanation of any automated security containment or diagnostic score. Inquiries may be submitted directly to the on-call SOC operations center via the eTrepid Sovereign Trust Center Intake Form (Select Topic: SOC Automated Decision Review & Human Appeal).

    ๐Ÿ”’ Restricted Technical Companion Available

    This document is an executive summary of a restricted operational standard. Qualified defense contractors and certified C3PAO assessment teams subject to CMMC Level 2 or NIST SP 800-171 audits may request unredacted inspection under our mutual non-disclosure agreement.