AR-005ÉlevéFournisseurPréventif
Mesures de cybersécurité pour les systèmes d'IA
L'article 15, paragraphe 5, exige que les systèmes d'IA à haut risque résistent aux tentatives non autorisées de tiers visant à modifier leurs résultats, et les fournisseurs doivent mettre en œuvre des mesures de cybersécurité appropriées tout au long du cycle de vie du système.
Articles:Article 15(5)
Exemples de preuves
- Cybersecurity architecture review
- Penetration test report
- Model access control specification
Normes
ISO 42001:2023 §8.4ISO/IEC 27001:2022ENISA AI Threat Landscape
Contrôles associés
- AR-001Accuracy Level Definition and CommitmentArticle 15(1) requires that high-risk AI systems are designed and developed to achieve an appropriate level of accuracy, robustness, and cybersecurity,…
- AR-002Accuracy Measurement and VerificationProviders must measure and verify the accuracy of the AI system against defined metrics using representative test sets, documenting the methodology,…
- AR-003Robustness Testing Against Input VariationsProviders must test the AI system's robustness against input variations that may arise in real-world deployment, including incomplete data, noisy inputs,…
- AR-004Adversarial Robustness TestingWhere relevant to the AI system's use case, providers must test robustness against adversarial inputs designed to cause misclassification, data poisoning…
- AR-006Fallback Procedures for System FailuresProviders must design and implement fallback procedures that activate when the AI system cannot operate within its designed parameters, ensuring safe…
- AR-007Input Validation and Data Quality ChecksProviders must implement input validation mechanisms that verify the quality, format, and plausibility of data before it is processed by the AI system,…
Termes associés du règlement sur l’IA
- AccuracyThe requirement that high-risk AI systems achieve an appropriate level of accuracy in relation to their intended purpose, as specified in the technical documentation. Providers must declare the level of accuracy in the instructions for use.
- RobustnessThe ability of a high-risk AI system to maintain its level of performance under adverse conditions — including technical limitations, adversarial inputs, errors, or unexpected situations — or within foreseeable operating conditions outside the intended purpose.
- CybersecurityThe requirement that high-risk AI systems are resilient against attempts by third parties to alter their use, behaviour, or performance in ways that could result in risks to health, safety, or fundamental rights, including protection against data poisoning, adversarial examples, and model evasion attacks.
Passez à la vitesse supérieure quand la conformité doit être
Le questionnaire gratuit fournit des signaux préliminaires. L'Évaluation Complète transforme les données réelles de vos systèmes en un dossier de décision gouverné : extraction, séparation des composants, preuves, surcouches nationales et dossier prêt à être audité.
Démarrer l'aperçu gratuit des risques