The generative AI profile is now baked in rather than bolted on — a sign the framework is maturing from “here’s a special case” to “this is just how it works now.”
Notable: the “measure” function got the largest expansion. That tracks with what I’m hearing from organisations — they know what to govern, but they don’t know what to count. Measurement is the gap between a governance policy and a governance practice.
Useful for anyone trying to align a UK/US governance posture without maintaining two separate control sets.