Introduction

Xcavate’s Risk Management Framework is designed to safeguard the integrity, confidentiality, and availability of our digital assets, systems, and user data. We align our protocols with global regulatory requirements and industry best practices, including:

• Financial Conduct Authority (FCA) regulations

• General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA)

• NIST Risk Management Framework (RMF) and related publications (e.g., SP 800-30r1, SP 800-53, SP 800-137)

• AI governance regulations (e.g., EU AI Act)