PM-004CriticalProviderDetective
Incident Detection and Root Cause Analysis
Providers must implement automated and manual mechanisms to detect incidents and near-misses in operation, and conduct root cause analysis for significant incidents to identify systemic issues and prevent recurrence.
Articles:Article 72(1)Article 73(1)
Evidence Examples
- Incident detection system configuration
- Root cause analysis report template
- Incident investigation records
Standards
ISO 42001:2023 §10.2ISO/IEC 27035-1
Related controls
- PM-001Post-Market Monitoring Plan EstablishmentArticle 72(3) requires providers to establish, document, and implement a post-market monitoring plan that proportionately reflects the nature of the AI…
- PM-002Operational Data Collection SystemProviders must implement a system for collecting and analysing relevant data on the performance of high-risk AI systems throughout their operational…
- PM-003In-Operation Performance TrackingProviders must continuously track performance indicators in operation, comparing actual performance against the baseline established during pre-market…
- PM-005Serious Incident Reporting to AuthoritiesArticle 73(1) requires providers and deployers to report serious incidents to the relevant market surveillance authority without undue delay after…
- PM-006Corrective Action ProceduresProviders must implement documented corrective action procedures that specify how identified performance issues, incidents, and non-conformities are…
- PM-007Feedback Integration from DeployersProviders must establish channels for receiving and systematically processing feedback from deployers about AI system performance, incidents, and…
Related EU AI Act terms
- Post-Market MonitoringProactive collection and review of experience gained from the use of high-risk AI systems, to identify any need for corrective or preventive actions and ensure continued compliance throughout the system lifecycle.
- Serious IncidentAn incident or malfunction of a high-risk AI system that directly or indirectly leads to the death of a person or serious damage to a person's health, a serious and irreversible disruption of the management of critical infrastructure, a breach of obligations under Union law protecting fundamental rights, or serious damage to property or the environment.
Upgrade when it needs to be
The free questionnaire returns preliminary signals. The Full Assessment turns real system material into a governed decision record - extraction, component separation, evidence, national overlays, and a review-ready dossier.
Start free risk preview