AR-010MedioProveedorDetective
Pruebas de estrés y cobertura de casos extremos
Los proveedores deben realizar pruebas de estrés del sistema de IA en condiciones de alta carga, entradas inusuales y casos extremos, documentando los resultados y garantizando que el sistema se comporte de forma segura y predecible en los límites de sus parámetros operativos.
Artículos:Article 15(1)Article 9(7)
Ejemplos de evidencia
- Stress test plan and results
- Edge case test log
- System behaviour at limits documentation
Normas
ISO 42001:2023 §8.4ISO/IEC 29119
Controles relacionados
- AR-001Accuracy Level Definition and CommitmentArticle 15(1) requires that high-risk AI systems are designed and developed to achieve an appropriate level of accuracy, robustness, and cybersecurity,…
- AR-002Accuracy Measurement and VerificationProviders must measure and verify the accuracy of the AI system against defined metrics using representative test sets, documenting the methodology,…
- AR-003Robustness Testing Against Input VariationsProviders must test the AI system's robustness against input variations that may arise in real-world deployment, including incomplete data, noisy inputs,…
- AR-004Adversarial Robustness TestingWhere relevant to the AI system's use case, providers must test robustness against adversarial inputs designed to cause misclassification, data poisoning…
- AR-005Cybersecurity Measures for AI SystemsArticle 15(5) requires that high-risk AI systems are resilient against unauthorised third-party attempts to alter their outputs, and providers must…
- AR-006Fallback Procedures for System FailuresProviders must design and implement fallback procedures that activate when the AI system cannot operate within its designed parameters, ensuring safe…
Términos relacionados de la Ley de IA
- Risk Management SystemA continuous iterative process that must be established, implemented, documented, and maintained by providers of high-risk AI systems throughout the entire lifecycle. Must include identification and analysis of known and reasonably foreseeable risks, estimation of risks that may emerge from misuse, and evaluation of residual risks.
- AccuracyThe requirement that high-risk AI systems achieve an appropriate level of accuracy in relation to their intended purpose, as specified in the technical documentation. Providers must declare the level of accuracy in the instructions for use.
- RobustnessThe ability of a high-risk AI system to maintain its level of performance under adverse conditions — including technical limitations, adversarial inputs, errors, or unexpected situations — or within foreseeable operating conditions outside the intended purpose.
- CybersecurityThe requirement that high-risk AI systems are resilient against attempts by third parties to alter their use, behaviour, or performance in ways that could result in risks to health, safety, or fundamental rights, including protection against data poisoning, adversarial examples, and model evasion attacks.
- Biometric DataPersonal data resulting from specific technical processing relating to the physical, physiological, or behavioural characteristics of a natural person, which allow or confirm the unique identification of that natural person, such as facial images or dactyloscopic data — a special category under GDPR Article 9.
Actualice cuando la conformidad deba ser
El cuestionario gratuito ofrece señales preliminares. La Evaluación Completa convierte la documentación real del sistema en un expediente de decisión auditable: extracción, separación de componentes, evidencias, normativas nacionales y dossier listo para auditoría.
Iniciar vista previa gratuita de riesgos