QM-005MediumProviderPreventive
Staff Training and Competency Procedures
Article 17(1)(d) requires providers to implement procedures for training personnel involved in AI system development, testing, and monitoring, with records of training completions and periodic competency reassessment.
Articles:Article 17(1)(d)Article 4
Evidence Examples
- Training matrix by role
- Training completion records
- AI literacy programme curriculum
Standards
ISO 42001:2023 §7.2ISO 9001:2015 §7.2
Related controls
- QM-001Quality Management System EstablishmentArticle 17(1) requires providers of high-risk AI systems to put in place a quality management system that ensures compliance with the requirements of the…
- QM-002Regulatory Compliance StrategyProviders must establish and document a strategy for achieving and maintaining compliance with applicable regulatory requirements, including the EU AI…
- QM-003Design Control ProceduresProviders must implement documented design control procedures that ensure regulatory and performance requirements are systematically incorporated from the…
- QM-004Data Management ProceduresProviders must have documented data management procedures covering the acquisition, preparation, use, and retention of data throughout the AI system…
- QM-006Pre-Market Testing and Validation ProceduresProviders must implement documented procedures for pre-market testing and validation of high-risk AI systems, including the metrics to be achieved, the…
- QM-007Post-Market Monitoring PlanArticle 17(1)(f) requires providers to implement a post-market monitoring plan that specifies the data to be collected, the monitoring frequency, the…
Related EU AI Act terms
- Quality Management SystemA documented system that providers of high-risk AI systems must establish, implement, document, and maintain covering: the regulatory compliance strategy, design and development processes, data governance procedures, risk management, post-market monitoring, and incident reporting.
- Garante per la Protezione dei DatiItaly's data protection authority (DPA), which also acts as a primary oversight body for AI systems involving personal data processing. Remote monitoring of workers in Italy requires INL (National Labour Inspectorate) authorisation or collective agreement under Statuto dei Lavoratori Article 4.
- AI LiteracySkills, knowledge, and understanding that allow providers, deployers, and affected persons to make an informed deployment and use of AI systems and to gain an awareness of the opportunities and risks of AI — required under Article 4 as a universal obligation for all operators across all risk tiers.
Upgrade when it needs to be
The free questionnaire returns preliminary signals. The Full Assessment turns real system material into a governed decision record - extraction, component separation, evidence, national overlays, and a review-ready dossier.
Start free risk preview