Achieve appropriate accuracy, robustness and cybersecurity

Practical action

Include AI-specific threat modelling and adversarial testing in your security programme.

Who does it apply to?

Providers of high-risk AI systems.

Actors

Provider / developer

Sectors

Cross-sector / all sectors

Use cases

Biometrics and facial recognitionAI in finance, credit and insuranceSafety-critical and infrastructure

Applies from: 2 December 2027

Which controls meet this duty?

Satisfies: the control, operated properly, does the work the duty asks for. Supports: it contributes but the duty needs more. Each control page lists every other duty it serves, so work done once can be counted once.

• satisfiesTechnical measureQuality or testing lead · at launch and on material change
  Accuracy, robustness, fairness and security testing

  Serves 15 recorded duties · evidence: Pre-release test report, Test plan and acceptance criteria, Release test sign-off

  Declared accuracy metrics, robustness and AI-specific security testing come from the release test programme.

• supportsTechnical measureAI security or safety lead · at launch and on material change
  Adversarial and red-team testing for generative AI

  Serves 8 recorded duties · evidence: Red-team exercise report, Red-team rules of engagement and scenario library, Adversarial findings tracker

  Adversarial exercises cover poisoning, evasion and extraction attempts.

• supportsTechnical measureAI system owner · continuous
  Post-deployment monitoring and drift detection

  Serves 10 recorded duties · evidence: Post-market monitoring plan, Monitoring dashboard or periodic monitoring report, Monitoring review decision

  Consistent performance over the lifecycle is confirmed in operation.

Templates that cover this duty

Generated from the records. Free · no account · links emailed to your work address. This duty is cited in each file with its source reference and a link back here.

• EU AI Act Role and Risk Classifier

  Checklist · XLSX · v4

• EU AI Act Article 50 Transparency Kit

  Kit · DOCX and XLSX · v32

• ISO/IEC 42001 Gap Assessment and Statement of Applicability

  Assessment · XLSX · v3

• NIST AI RMF ↔ EU AI Act ↔ ISO/IEC 42001 Crosswalk

  Crosswalk · XLSX · v3

All 8 templates that cover it →

What evidence would a reviewer expect?

Framework mappings

Original editorial crosswalks. They cite clause numbers only and reproduce no standard text; confidence reflects how direct the mapping is.

See every European Union duty mapped this way →

Frequently asked questions

Cite this record

AIPolicyTracker (2026). “Achieve appropriate accuracy, robustness and cybersecurity (EU AI Act)” [AIPT-OBL-0012, not yet verified]. https://aipolicytracker.org/id/AIPT-OBL-0012 (accessed 27 October 2026). Data licensed CC BY 4.0.

Permanent id AIPT-OBL-0012: it never changes or gets reused, and its address keeps working if this page moves.

Cite the official text alongside it: Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence, Official Journal of the European Union, https://eur-lex.europa.eu/eli/reg/2024/1689/oj.

@misc{aipolicytracker2026_achieveappropriateaccura,
  author       = {{AIPolicyTracker}},
  title        = {{Achieve appropriate accuracy, robustness and cybersecurity (EU AI Act)}},
  year         = {2026},
  howpublished = {\url{https://aipolicytracker.org/obligations/eu-ai-act-accuracy-robustness-cybersecurity}},
  url          = {https://aipolicytracker.org/obligations/eu-ai-act-accuracy-robustness-cybersecurity},
  urldate      = {2026-10-27},
  note         = {Data licensed CC BY 4.0. Accessed 27 October 2026}
}

Change history

Similar obligations in other instruments

• Employers and employment agencies must obtain an independent bias audit before using an automated employment decision tool — NYC Local Law 144 (automated employment decision tools), New York (United States)
• Providers of systemic-risk GPAI models must secure the model and its infrastructure — EU AI Act, European Union