RK-002AltoFornitorePreventivo
Integrità dei log e protezione dalle manomissioni
I fornitori devono garantire che i log siano protetti contro manomissioni, eliminazione o modifica non autorizzate, mediante controlli crittografici di integrità, archiviazione write-once o misure tecniche equivalenti.
Articoli:Article 12(1)Article 12(2)
Esempi di prove
- Log integrity mechanism description
- Cryptographic hash verification procedure
- Immutable log storage configuration
Norme
ISO/IEC 27001:2022 A.8.15ISO 42001:2023 §9.1
Controlli correlati
- RK-001Automatic Event Logging CapabilityArticle 12(1) requires that high-risk AI systems are designed and developed with automatic logging capabilities, enabling the reconstruction of events…
- RK-003Log Retention for Minimum 10 YearsArticle 18(1) requires that providers retain technical documentation and logs for at least 10 years after the high-risk AI system is placed on the market…
- RK-004Log Accessibility for Competent AuthoritiesProviders must ensure that event logs are accessible to competent national authorities and market surveillance authorities upon request, with procedures…
- RK-005Event Traceability and ReconstructionLogs must enable the tracing and reconstruction of decision events to understand the inputs processed, the outputs generated, and the conditions under…
- RK-006Performance and Operational Metrics LoggingProviders must log performance and operational metrics relevant to verifying that the AI system operates within the parameters established in the…
- RK-007Anomaly and Error Detection LoggingThe logging system must capture anomalous behaviour, errors, and unexpected outputs from the AI system in operation, enabling timely detection of…
Termini correlati del Regolamento IA
Passa alla versione completa quando la conformità deve essere
Il questionario gratuito fornisce segnali preliminari. La Valutazione Completa trasforma i dati reali di sistema in un fascicolo decisionale governato: estrazione, separazione componenti, prove, sovrapposizioni nazionali e dossier pronto per audit.
Avvia anteprima gratuita del rischio