Skip to content

Build

Cybersecurity: what AI regulations require

Security of hosting, model and software supply chain.

14 requirements · 11 regulations · 6 checks

Requirements by regulation

EUAI Act2

EX-009

Accuracy, robustness, cybersecurity Art. 15

EX-032

GPAI obligations with systemic risk Art. 55

UKUK principles1

UK-01

Safety, security and robustness Principle 1

EUDORA2

DORA-24

Operational resilience testing, TLPT for significant entities Art. 24-27

DORA-11

Continuity, response and recovery Art. 11

EUNIS21

NIS2-21

Cyber risk-management measures, incl. supply chain Art. 21

EUCRA2

CRA-I.1

Essential requirements: secure by design, no known exploitable vulnerabilities Annex I part I

CRA-I.2

Vulnerability handling: SBOM, updates over the support period Annex I part II

EUPLD1

PLD-07

Defectiveness: self-learning, cybersecurity, updates Art. 7

USNIST AI RMF1

MEASURE-2.7

AI system security and resilience - as identified in the map function - are evaluated and documented. MEASURE

CASB 531

SB53-01

Publish a frontier AI framework (thresholds, mitigations, governance, weight security) §22757.12(a)

BRPL 23381

BR-12

Security testing Art. 18 II.c

INTLOECD AI1

OECD-1.4

Robustness, security and safety 1.4

Checks in this theme

Most shared first

Code	Check	Used by
VER-009-03	Cybersecurity of the AI system verified	AI Act PL 2338 CRA RGPD PLD UK principles
VER-009-01	Cybersecurity of the hosting environment	AI Act PL 2338 RGPD NIS2
VER-009-F-04	Resilience to adversarial attacks tested	AI Act CRA DORA
CHK-SECURITY	Security and resilience are evaluated and documented	DORA NIST AI RMF OECD AI
VER-032-G-04	Cybersecurity of the model and physical infrastructure ensured	AI Act SB 53
NEW-CRA-01	System SBOM maintained	CRA

Related themes

Data governance Technical documentation Logging & traceability Accuracy & robustness Environmental impact

Run these requirements across all your AI systems

TrustFlow inventories your systems, qualifies them under each regulation and collects evidence once for every referential.