Cyber & IT Supervisory Forum - Additional Resources

CYBERSECURITY OF AI AND STANDARDISATION

TABLE OF CONTENTS

1. INTRODUCTION

8

1.1 DOCUMENT PURPOSE AND OBJECTIVES

8

1.2 TARGET AUDIENCE AND PREREQUISITES

8

1.3 STRUCTURE OF THE STUDY

8

2. SCOPE OF THE REPORT: DEFINITION OF AI AND CYBERSECURITY OF AI 9

2.1 ARTIFICIAL INTELLIGENCE

9

2.2 CYBERSECURITY OF AI

10

3. STANDARDISATION IN SUPPORT OF CYBERSECURITY OF AI

12

3.1 RELEVANT ACTIVITIES BY THE MAIN STANDARDS-DEVELOPING ORGANISATIONS

12

3.1.1 CEN-CENELEC

12 13 14 14

3.1.2 ETSI

3.1.3 ISO-IEC

3.1.4 Others

4. ANALYSIS OF COVERAGE

16

4.1 STANDARDISATION IN SUPPORT OF CYBERSECURITY OF AI – NARROW SENSE

16

4.2 STANDARDISATION IN SUPPORT OF THE CYBERSECURITY OF AI – TRUSTWORTHINESS

19

4.3 CYBERSECURITY AND STANDARDISATION IN THE CONTEXT OF THE DRAFT AI ACT

21

5. CONCLUSIONS

24

5.1 WRAP-UP

24

5.2 RECOMMENDATIONS

25

5.2.1 Recommendations to all organisations

25 25 25

5.2.2 Recommendations to standards-developing organisations

5.2.3 Recommendations in preparation for the implementation of the draft AI Act

5.3 FINAL OBSERVATIONS

26

A ANNEX:

27

A.1 SELECTION OF ISO 27000 SERIES STANDARDS RELEVANT TO THE CYBERSECURITY OF AI

27

4