Cyber & IT Supervisory Forum - Additional Resources

A MULTILAYER FRAMEWORK FOR GOOD CYBERSECURITY PRACTICES FOR AI June 2023

ANNEX II: AI-RELATED STANDARDS

A.1 AI SECURITY-RELATED STANDARDS ETSI ISG 100

• ETSI GR SAI 006 V1.1.1 (2022-03) The role of hardware in security of AI • ETSI GR SAI 001 V1.1.1 (2022-01) AI Threat Ontology • ETSI GR SAI 002 V1.1.1 (2021-08) Data Supply Chain Security • ETSI GR SAI 005 V1.1.1 (2021-03) Mitigation Strategy Report • ETSI GR SAI 004 V1.1.1 (2020-12) Problem Statement • ISO/IEC 24368:2022 Artificial Intelligence – overview of ethical and societal concerns • ISO/IEC 22989:2022 Artificial Intelligence – concepts and terminology • ISO/IEC DIS 23894 – Information technology – Artificial intelligence – Risk management – under development • ISO/IEC CD 42001.2 – Information Technology – Artificial intelligence – Management system – under development • ISO/IEC TR 24027:2021 – Information technology – Artificial intelligence (AI) – Bias in AI systems and AI aided decision-making • ISO/IEC AWI TS 12791 – Information technology – Artificial intelligence – Treatment of unwanted bias in classification and regression machine learning tasks – under development • ISO/IEC TR 24028:2020 – Information technology – Artificial intelligence – Overview of trustworthiness in artificial intelligence • ISO/IEC TR 24029-1:2021 – Artificial Intelligence (AI) – Assessment of the robustness of neural networks – Part 1: Overview • ISO/IEC CD 24029-2 – Artificial intelligence (AI) – Assessment of the robustness of neural networks – Part 2: Methodology for the use of formal methods – under development • ISO/IEC DTR 24368 – Information technology – Artificial intelligence – Overview of ethical and societal concerns – under development • ISO/IEC DTR 27563 – Impact of security and privacy in Artificial Intelligence – under development • ISO/IEC AWI 12792 – Information technology – Artificial intelligence – Transparency taxonomy of AI systems – under development

ISO/IEC 101

A.2 DESIGN-RELATED STANDARDS The work of IEEE addresses some of the most important characteristics of AI as a determinant for its trustworthiness, with a particular focus on explainability, but also on model distribution and management. • IEEE 7000 Standards for Building Ethical Systems • IEEE 2894 Guide for an Architectural Framework for Explainable Artificial Intelligence • IEEE 2941 Approved Draft Standard for Artificial Intelligence (AI) Model Representation, Compression, Distribution and Management

100 https://www.etsi.org/committee/1640-sai. 101 https://www.iso.org.

42