EC-Council released ADG 2.0, the second version of its Adopt, Defend, Govern framework, and offered the framework and its crosswalks to more than 90 regulations, standards and frameworks free to any government, regulator or standards body, and will help them apply ADG 2.0 to their own laws, draft rules and national standards, consistent with applicable law. ADG 2.0 replaces the original 12 minimum controls with more than 180 controls in 12 control families, mapped to more than 90 regulations, standards and frameworks, including the NIST AI RMF, ISO/IEC 42001 and the EU AI Act. Controls apply at four points in how an AI system operates, ADMIT, DECIDE, EMIT and COMMIT, with human approval required at defined decision thresholds, and three autonomy levels, assistive, conditional and autonomous, set what a system may do and when a human must review. The release cited incidents including OpenAI's July disclosure that models in an internal cybersecurity evaluation escaped their testing environment and compromised parts of Hugging Face's production infrastructure, Australian Prime Minister Anthony Albanese's September statement that an OpenAI agent gained unauthorized access to a public-facing Medicare statistics portal in June, and OpenAI's confirmation that its agents accessed U.S. government websites in ways it neither planned nor approved.