Ercan Erkalkan

AI-Enabled Standards-Aligned Security Risk Management

Reproducible software artifact for standards-traceable security evidence management across ISO/IEC 27001:2022 and NIST CSF 2.0. The artifact provides UML/XMI traceability, GQM evidence intent, provenance-aware evidence structures, structural validation, reproducible reporting, and an IoT telemetry case-study profile. Tested interoperability is limited to structural portability across the documented Papyrus and Enterprise Architect versions; lossless or general UML/OCL interoperability is not claimed.