TD-009AltoFornitorePreventivo
Procedure di gestione delle modifiche
I fornitori devono documentare le procedure per gestire le modifiche al sistema di IA che possano incidere sullo stato di conformità, attivando una rivalutazione quando la modifica è sostanziale e potenzialmente richiedendo una nuova valutazione della conformità.
Articoli:Article 11(3)Article 43(4)
Esempi di prove
- Change management procedure document
- Change impact classification criteria
- Re-assessment trigger log
Norme
ISO 42001:2023 §6.3ISO/IEC 27001:2022 §6.3
Controlli correlati
- TD-001AI System Description and General InformationArticle 11 and Annex IV require that technical documentation includes a general description of the AI system covering its intended purpose, the persons…
- TD-002Design Specifications and ArchitectureProviders must document the overall design logic of the AI system, including the algorithms and associated design choices, the key design parameters, and…
- TD-003Development Process DocumentationTechnical documentation must describe the methods and steps performed for the development of the AI system, including data collection, labelling, model…
- TD-004Validation and Testing Approach DocumentationProviders must document the validation and testing procedures applied to the AI system prior to placing it on the market, including the metrics used, the…
- TD-005System Monitoring Plan DocumentationTechnical documentation must include a plan describing the measures for monitoring the AI system in operation, the data to be collected, the performance…
- TD-006Accuracy Metrics and Performance DocumentationProviders must document the accuracy, robustness, and cybersecurity metrics for which the high-risk AI system was designed and the relevant testing…
Termini correlati del Regolamento IA
- Conformity AssessmentThe process of verifying whether a high-risk AI system complies with the requirements set out in Chapter III Section 2 of the Regulation. Can be conducted through internal control (Annex VI) or with involvement of a notified body (Annex VII).
- Technical DocumentationThe documentation that providers of high-risk AI systems must draw up before placing the system on the market, containing all necessary information to assess compliance with the Regulation, including a general description, design specifications, training data information, risk management records, and performance metrics. Content requirements are set out in Annex IV.
Passa alla versione completa quando la conformità deve essere
Il questionario gratuito fornisce segnali preliminari. La Valutazione Completa trasforma i dati reali di sistema in un fascicolo decisionale governato: estrazione, separazione componenti, prove, sovrapposizioni nazionali e dossier pronto per audit.
Avvia anteprima gratuita del rischio