HO-008HighDeployerPreventive
Oversight Training Programme
Deployers must provide training to persons responsible for overseeing AI systems, covering the system's intended purpose, limitations, risk factors, and the specific oversight procedures required, with records of training completion.
Articles:Article 14(3)Article 4Article 26(5)
Evidence Examples
- Oversight training curriculum
- Training completion log
- Training effectiveness assessment
Standards
ISO 42001:2023 §7.2
Related controls
- HO-001Human Oversight Mechanism DesignArticle 14(1) requires that high-risk AI systems are designed and developed in a way that enables natural persons to effectively oversee the system's…
- HO-002Override and Intervention CapabilityHigh-risk AI systems must include a capability for human overseers to intervene in or interrupt the system's operation, and providers must document this…
- HO-003Stop Function ImplementationProviders must implement a stop function that enables the immediate cessation of the AI system's operation when required by human overseers, with a clear,…
- HO-004Automation Bias Awareness TrainingArticle 14(4) requires that oversight persons are aware of the tendency to over-rely on AI outputs (automation bias); deployers must implement training…
- HO-005Output Interpretation CapabilityDeployers must ensure that persons assigned to oversee high-risk AI systems have the capability to correctly interpret the system's outputs, including the…
- HO-006Decision Reversal and Correction ProcessDeployers must establish documented procedures for reversing or correcting AI-assisted decisions that affect natural persons, including how affected…
Related EU AI Act terms
- Logging CapabilitiesThe automatic recording of events by a high-risk AI system during its operation — required under Article 12 to enable monitoring of its operation, post-hoc investigation of incidents, and to support the post-market monitoring obligations of providers and deployers.
- Human OversightMeasures built into high-risk AI systems enabling natural persons to understand, monitor, and — where necessary — override or shut down the system. Must be proportionate to the risks and must ensure that deployers can intervene in the system's output before it takes effect.
- Garante per la Protezione dei DatiItaly's data protection authority (DPA), which also acts as a primary oversight body for AI systems involving personal data processing. Remote monitoring of workers in Italy requires INL (National Labour Inspectorate) authorisation or collective agreement under Statuto dei Lavoratori Article 4.
- AI LiteracySkills, knowledge, and understanding that allow providers, deployers, and affected persons to make an informed deployment and use of AI systems and to gain an awareness of the opportunities and risks of AI — required under Article 4 as a universal obligation for all operators across all risk tiers.
Upgrade when it needs to be
The free questionnaire returns preliminary signals. The Full Assessment turns real system material into a governed decision record - extraction, component separation, evidence, national overlays, and a review-ready dossier.
Start free risk preview