Skip to main content

CCC.GenAI.C05: Citations and Source Traceability

Control ID:CCC.GenAI.C05
Title:Citations and Source Traceability
Objective:Require the GenAI system to provide citations or direct links back to the source documents used to generate a response, in to enhance the transparency, trustworthiness, and verifiability of AI-generated content.
Control Family:
Data

Related Threats

IDTitleDescriptionExternal MappingsCapability MappingsControl Mappings
CCC.GenAI.TH09Lack of ExplainabilityThe "black box" nature of GenAI models makes it difficult or impossible to understand the specific reasoning behind a given output. This opacity makes it challenging to diagnose failures, detect hidden biases, and meet regulatory requirements for decision transparency.
2
1
0
CCC.GenAI.TH04Insecure / Unreliable Model OutputA GenAI model may generate content that is incorrect, misleading or harmful, such as convincing misinformation (hallucinations) or vulnerable or malicious code, due to its reliance on statistical patterns rather than factual understanding. Directly using this flawed output without validation can lead to system compromises, poor decision-making, and legal or reputational damage.
4
1
0

Related Capabilities

IDTitleDescription
CCC.GenAI.F21Generate ContentAbility to generate a response given a foundation model, parameter values, and a prompt.

Guideline Mappings

Reference IDEntry IDStrengthRemarks
FINOS-AIGF
AIR-DET-013
0
Providing Citations and Source Traceability for AI-Generated Information

Assessment Requirements

IDDescriptionApplicability
CCC.GenAI.C05.TR01When a RAG-enabled system generates a response containing information retrieved from its knowledge base, then the response MUST include a verifiable citation that links back to the specific source document.
tlp-clear
tlp-green
tlp-amber
tlp-red