AESIA's Specialised Technical Guides To Support Compliance With The European Artificial Intelligence Act (Guides 11 & 12)

We continue our analysis of the second set of Specialised Technical Guides (Guides 3 to 15) issued by the Spanish Artificial Intelligence Supervisory Agency (AESIA) to support compliance with the European Artificial Intelligence Act (AI Act).

On this occasion we take a look at the key aspects of Guides 11 and 12, which address cibersecurity and logging: 

Guide 11: "Cibersecurity"

Guide 11, entitled "Cybersecurity", develops the measures that ought to be implemented in AI systems to mitigate the risks and attacks they may face throughout their lifecycle.

The Guide stresses that, to effectively implement these measures, it is essential to first identify the types of potential threats and attacks that exist. To this end, it provides an outline that connects the different phases of a system's lifecycle to the possible attacks in each of them: