HO-007HighProvider & DeployerPreventive
Oversight Personnel Competency Requirements
Providers must specify in the instructions for use the competencies required for persons assigned to oversee the AI system, and deployers must verify that assigned personnel meet these requirements before deployment.
Articles:Article 14(3)Article 26(5)
Evidence Examples
- Required competency specification
- Personnel qualification records
- Competency gap assessment
Standards
ISO 42001:2023 §7.2
Related controls
- HO-001Human Oversight Mechanism DesignArticle 14(1) requires that high-risk AI systems are designed and developed in a way that enables natural persons to effectively oversee the system's…
- HO-002Override and Intervention CapabilityHigh-risk AI systems must include a capability for human overseers to intervene in or interrupt the system's operation, and providers must document this…
- HO-003Stop Function ImplementationProviders must implement a stop function that enables the immediate cessation of the AI system's operation when required by human overseers, with a clear,…
- HO-004Automation Bias Awareness TrainingArticle 14(4) requires that oversight persons are aware of the tendency to over-rely on AI outputs (automation bias); deployers must implement training…
- HO-005Output Interpretation CapabilityDeployers must ensure that persons assigned to oversee high-risk AI systems have the capability to correctly interpret the system's outputs, including the…
- HO-006Decision Reversal and Correction ProcessDeployers must establish documented procedures for reversing or correcting AI-assisted decisions that affect natural persons, including how affected…
Related EU AI Act terms
- Logging CapabilitiesThe automatic recording of events by a high-risk AI system during its operation — required under Article 12 to enable monitoring of its operation, post-hoc investigation of incidents, and to support the post-market monitoring obligations of providers and deployers.
- Human OversightMeasures built into high-risk AI systems enabling natural persons to understand, monitor, and — where necessary — override or shut down the system. Must be proportionate to the risks and must ensure that deployers can intervene in the system's output before it takes effect.
Upgrade when it needs to be
The free questionnaire returns preliminary signals. The Full Assessment turns real system material into a governed decision record - extraction, component separation, evidence, national overlays, and a review-ready dossier.
Start free risk preview