RequirementsArticle 9
Système de gestion des risques
Un processus continu et itératif que les fournisseurs de systèmes d’IA à haut risque doivent établir, appliquer, documenter et maintenir tout au long du cycle de vie complet. Doit inclure l’identification et l’analyse des risques connus et raisonnablement prévisibles, l’estimation des risques pouvant résulter d’une utilisation abusive et l’évaluation des risques résiduels.
Termes associés
- Data GovernancePractices and policies applicable to training, validation, and testing data sets used for high-risk AI systems, covering the design choices, data…
- Human OversightMeasures built into high-risk AI systems enabling natural persons to understand, monitor, and — where necessary — override or shut down the system. Must…
- AccuracyThe requirement that high-risk AI systems achieve an appropriate level of accuracy in relation to their intended purpose, as specified in the technical…
- RobustnessThe ability of a high-risk AI system to maintain its level of performance under adverse conditions — including technical limitations, adversarial inputs,…
- CybersecurityThe requirement that high-risk AI systems are resilient against attempts by third parties to alter their use, behaviour, or performance in ways that could…
- Transparency RequirementsObligations under Article 13 requiring that high-risk AI systems are designed to ensure that their operation is sufficiently transparent to enable…
Contrôles de conformité associés
- RM-001Establish Risk Management SystemArticle 9(1) requires providers to establish, implement, document, and maintain a risk management system as a continuous iterative process throughout the entire lifecycle of the high-risk AI system.
- RM-002Identify Known and Foreseeable RisksProviders must identify and analyse known and foreseeable risks that the high-risk AI system may pose to health, safety, or fundamental rights when used as intended and under reasonably foreseeable misuse conditions.
- RM-003Risk Estimation and Probability AssessmentProviders must estimate and evaluate the likelihood and severity of potential harm, taking into account the intended purpose, foreseeable misuse, and the vulnerability of affected natural persons.
- RM-004Risk Evaluation Against Acceptance CriteriaProviders must evaluate identified risks against pre-defined risk acceptance criteria and document the rationale for accepting residual risks that cannot be fully mitigated.
Passez à la vitesse supérieure quand la conformité doit être
Le questionnaire gratuit fournit des signaux préliminaires. L'Évaluation Complète transforme les données réelles de vos systèmes en un dossier de décision gouverné : extraction, séparation des composants, preuves, surcouches nationales et dossier prêt à être audité.
Démarrer l'aperçu gratuit des risques