RequirementsArticle 15(4)–(5)
Cybersecurity
The requirement that high-risk AI systems are resilient against attempts by third parties to alter their use, behaviour, or performance in ways that could result in risks to health, safety, or fundamental rights, including protection against data poisoning, adversarial examples, and model evasion attacks.
Related terms
- Risk Management SystemA continuous iterative process that must be established, implemented, documented, and maintained by providers of high-risk AI systems throughout the…
- Data GovernancePractices and policies applicable to training, validation, and testing data sets used for high-risk AI systems, covering the design choices, data…
- Human OversightMeasures built into high-risk AI systems enabling natural persons to understand, monitor, and — where necessary — override or shut down the system. Must…
- AccuracyThe requirement that high-risk AI systems achieve an appropriate level of accuracy in relation to their intended purpose, as specified in the technical…
- RobustnessThe ability of a high-risk AI system to maintain its level of performance under adverse conditions — including technical limitations, adversarial inputs,…
- Transparency RequirementsObligations under Article 13 requiring that high-risk AI systems are designed to ensure that their operation is sufficiently transparent to enable…
Related compliance controls
- DG-009Statistical Testing and ValidationProviders must apply appropriate statistical methods to validate that training data meets quality thresholds and that the resulting model generalises appropriately to the intended deployment distribution.
- TD-006Accuracy Metrics and Performance DocumentationProviders must document the accuracy, robustness, and cybersecurity metrics for which the high-risk AI system was designed and the relevant testing methodologies, including the context in which these metrics were measured.
- RK-006Performance and Operational Metrics LoggingProviders must log performance and operational metrics relevant to verifying that the AI system operates within the parameters established in the technical documentation, including accuracy and response time indicators.
- TR-003Performance Metrics Disclosure to DeployersThe instructions for use must include the performance metrics for which the system has been designed and the level of accuracy that the provider committed to achieving, enabling deployers to assess whether the system meets their operational requirements.
Upgrade when it needs to be
The free questionnaire returns preliminary signals. The Full Assessment turns real system material into a governed decision record - extraction, component separation, evidence, national overlays, and a review-ready dossier.
Start free risk preview