[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:eu-ai-act\u002F9":3},{"item":4,"lessons":16,"controls":66,"related":94},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"eu-ai-act","9","Article 9","Risk management system",45,"European Union","**What it asks for.** Article 9 requires providers of high risk AI systems to establish, document and maintain a risk management system as a continuous, iterative process across the whole life cycle of the system. It covers identifying and analysing known and foreseeable risks to health, safety and fundamental rights, evaluating risks including from reasonably foreseeable misuse, and adopting risk management measures.\n\n**In practice.** The provider documents risks for each high risk system, considers misuse and the intended context of use, applies design and mitigation measures, and tests the system against defined metrics before release. Post market monitoring feeds back into the process, and impacts on vulnerable groups including minors are considered. Evidence includes the risk management file, test results and update records.\n\n**Common gaps.** Risk management is often a one time pre launch exercise rather than continuous. Fundamental rights risks receive less attention than technical performance.",null,"https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Freg\u002F2024\u002F1689\u002Foj","Read the AI Act on EUR-Lex","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"federal-agencies-issue-cybersecurity-guidance-for-frontier-ai-systems","Federal Agencies Issue Cybersecurity Guidance for Frontier AI Systems","2026-10-17T02:20:17.238+00:00",{"slug":23,"title":24,"published_at":25},"nist-nsa-cisa-issue-guidance-on-ai-incident-readiness-for-high-risk-ai-systems","NIST, NSA & CISA Issue Guidance on AI Incident Readiness for High-Risk AI Systems","2026-10-16T18:21:54.014+00:00",{"slug":27,"title":28,"published_at":29},"governing-open-weight-ai-models-requires-structured-enterprise-risk-frameworks","Governing Open-Weight AI Models Requires Structured Enterprise Risk Frameworks","2026-10-16T18:21:38.63+00:00",{"slug":31,"title":32,"published_at":33},"ai-chatbots-targeted-by-covert-political-influence-networks","AI Chatbots Targeted by Covert Political Influence Networks","2026-10-15T20:20:35.974+00:00",{"slug":35,"title":36,"published_at":37},"ai-worms-a-new-self-replicating-threat-on-the-horizon","AI Worms: A New Self-Replicating Threat on the Horizon","2026-10-13T22:21:28.999+00:00",{"slug":39,"title":40,"published_at":41},"anthropic-ai-models-exploit-government-sites-during-testing","Anthropic AI Models Exploit Government Sites During Testing","2026-10-12T20:20:33.279+00:00",{"slug":43,"title":44,"published_at":45},"ai-hiring-tool-triggers-gdpr-warning-over-lack-of-dpias-and-transparency","AI Hiring Tool Triggers GDPR Warning Over Lack of DPIAs and Transparency","2026-10-08T16:21:43.317+00:00",{"slug":47,"title":48,"published_at":49},"agentic-ai-escapes-guardrails-exposing-legal-blind-spots","Agentic AI Escapes Guardrails, Exposing Legal Blind Spots","2026-10-02T18:20:24.469+00:00",{"slug":51,"title":52,"published_at":53},"ai-powered-vulnerability-discovery-raises-both-promise-and-risk","AI-Powered Vulnerability Discovery Raises Both Promise and Risk","2026-10-01T10:21:20.992+00:00",{"slug":55,"title":56,"published_at":57},"ai-powered-vulnerability-discovery-raises-access-control-and-governance-stakes","AI-Powered Vulnerability Discovery Raises Access Control and Governance Stakes","2026-10-01T08:20:18.932+00:00",{"slug":59,"title":60,"published_at":61},"ftc-probes-openai-anthropic-over-ai-agent-safety-and-consumer-risks","FTC Probes OpenAI & Anthropic Over AI Agent Safety and Consumer Risks","2026-10-01T00:20:23.357+00:00",{"slug":63,"title":64,"published_at":65},"ai-agent-actions-create-legal-liability-gaps-for-developers","AI Agent Actions Create Legal Liability Gaps for Developers","2026-09-30T12:20:57.087+00:00",[67,72,77,81,85,90],{"slug":68,"name":69,"problem":70,"stories":71},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",34,{"slug":73,"name":74,"problem":75,"stories":76},"breach-attack-simulation","Breach and attack simulation","You only find out whether your security tools stop an attack when a real attacker tries.",5,{"slug":78,"name":79,"problem":80,"stories":76},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",{"slug":82,"name":83,"problem":84,"stories":76},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",{"slug":86,"name":87,"problem":88,"stories":89},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",4,{"slug":91,"name":92,"problem":93,"stories":89},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[95,100,104,110,115,120,125,130],{"family":96,"item":97,"code":98,"title":99,"together":9},"nist-ai-rmf","overview","AI RMF 1.0","AI Risk Management Framework (AI RMF 1.0)",{"family":101,"item":97,"code":102,"title":102,"together":103},"itil","ITIL",23,{"family":105,"item":106,"code":107,"title":108,"together":109},"iso","42001","ISO\u002FIEC 42001","ISO\u002FIEC 42001: Artificial intelligence management system",21,{"family":111,"item":112,"code":113,"title":114,"together":109},"cis","16","Control 16","Application Software Security",{"family":111,"item":116,"code":117,"title":118,"together":119},"8","Control 8","Audit Log Management",18,{"family":111,"item":121,"code":122,"title":123,"together":124},"6","Control 6","Access Control Management",14,{"family":111,"item":126,"code":127,"title":128,"together":129},"3","Control 3","Data Protection",13,{"family":131,"item":132,"code":133,"title":134,"together":129},"gdpr","25","Article 25","Data protection by design and by default"]