[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:eu-ai-act\u002F15":3},{"item":4,"lessons":16,"controls":30,"related":44},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"eu-ai-act","15","Article 15","Accuracy, robustness and cybersecurity",3,"European Union","**What it asks for.** Article 15 requires high risk AI systems to be designed and developed to achieve an appropriate level of accuracy, robustness and cybersecurity and to perform consistently across their life cycle. Systems should be resilient to errors and to attempts by unauthorised third parties to alter their use, outputs or performance by exploiting vulnerabilities.\n\n**In practice.** Providers declare accuracy metrics in instructions for use, test robustness against errors and changing inputs, handle feedback loops in systems that keep learning, and protect against AI specific attacks such as data poisoning, model poisoning, adversarial examples and model flaws. Evidence includes test reports, threat models for the AI system and security controls documentation.\n\n**Common gaps.** Traditional security testing often ignores AI specific attacks. Accuracy is measured at launch but not monitored as data and conditions drift.",null,"https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Freg\u002F2024\u002F1689\u002Foj","Read the AI Act on EUR-Lex","2026-10-18T15:18:43.664+00:00",{"total":9,"list":17},[18,22,26],{"slug":19,"title":20,"published_at":21},"openais-astra-ai-model-flagged-as-critical-cyberattack-risk","OpenAI's Astra AI Model Flagged as Critical Cyberattack Risk","2026-08-10T18:22:34.261+00:00",{"slug":23,"title":24,"published_at":25},"openai-pauses-astra-model-development-over-critical-cyber-capability-concerns","OpenAI Pauses Astra Model Development Over Critical Cyber Capability Concerns","2026-08-10T08:20:37.679+00:00",{"slug":27,"title":28,"published_at":29},"ai-agents-acted-autonomously-against-real-targets-during-safety-evaluations","AI Agents Acted Autonomously Against Real Targets During Safety Evaluations","2026-08-05T00:20:23.039+00:00",[31,35,40],{"slug":32,"name":33,"problem":34,"stories":9},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",{"slug":36,"name":37,"problem":38,"stories":39},"breach-attack-simulation","Breach and attack simulation","You only find out whether your security tools stop an attack when a real attacker tries.",2,{"slug":41,"name":42,"problem":43,"stories":39},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[45,50,54,59,64,68,71,76],{"family":46,"item":47,"code":48,"title":49,"together":9},"iso","42001","ISO\u002FIEC 42001","ISO\u002FIEC 42001: Artificial intelligence management system",{"family":5,"item":51,"code":52,"title":53,"together":9},"9","Article 9","Risk management system",{"family":55,"item":56,"code":57,"title":58,"together":9},"cis","16","Control 16","Application Software Security",{"family":60,"item":61,"code":62,"title":63,"together":9},"nist-ai-rmf","overview","AI RMF 1.0","AI Risk Management Framework (AI RMF 1.0)",{"family":55,"item":65,"code":66,"title":67,"together":39},"18","Control 18","Penetration Testing",{"family":69,"item":61,"code":70,"title":70,"together":39},"itil","ITIL",{"family":55,"item":72,"code":73,"title":74,"together":75},"6","Control 6","Access Control Management",1,{"family":55,"item":77,"code":78,"title":79,"together":75},"3","Control 3","Data Protection"]