RM-006AltoFornitoreInvestigativo
Collaudo ai fini della gestione dei rischi
L’articolo 9, paragrafo 7, richiede che i sistemi di IA ad alto rischio siano collaudati per individuare le misure di gestione dei rischi più appropriate e verificare che il sistema funzioni in modo coerente con la sua finalità prevista durante tutto lo sviluppo.
Articoli:Article 9(7)Article 9(8)
Esempi di prove
- Test plan aligned to risk scenarios
- Test execution reports
- Performance verification records
Norme
ISO 42001:2023 §8.4ISO/IEC 29119
Controlli correlati
- RM-001Establish Risk Management SystemArticle 9(1) requires providers to establish, implement, document, and maintain a risk management system as a continuous iterative process throughout the…
- RM-002Identify Known and Foreseeable RisksProviders must identify and analyse known and foreseeable risks that the high-risk AI system may pose to health, safety, or fundamental rights when used…
- RM-003Risk Estimation and Probability AssessmentProviders must estimate and evaluate the likelihood and severity of potential harm, taking into account the intended purpose, foreseeable misuse, and the…
- RM-004Risk Evaluation Against Acceptance CriteriaProviders must evaluate identified risks against pre-defined risk acceptance criteria and document the rationale for accepting residual risks that cannot…
- RM-005Implement Risk Treatment MeasuresProviders must adopt suitable risk management measures to address identified risks, prioritising the elimination or reduction of risk at design stage…
- RM-007Residual Risk Documentation and DisclosureProviders must document residual risks that users need to be informed of and include relevant information in the system instructions for use, enabling…
Termini correlati del Regolamento IA
- Risk Management SystemA continuous iterative process that must be established, implemented, documented, and maintained by providers of high-risk AI systems throughout the entire lifecycle. Must include identification and analysis of known and reasonably foreseeable risks, estimation of risks that may emerge from misuse, and evaluation of residual risks.
- Biometric DataPersonal data resulting from specific technical processing relating to the physical, physiological, or behavioural characteristics of a natural person, which allow or confirm the unique identification of that natural person, such as facial images or dactyloscopic data — a special category under GDPR Article 9.
Passa alla versione completa quando la conformità deve essere
Il questionario gratuito fornisce segnali preliminari. La Valutazione Completa trasforma i dati reali di sistema in un fascicolo decisionale governato: estrazione, separazione componenti, prove, sovrapposizioni nazionali e dossier pronto per audit.
Avvia anteprima gratuita del rischio