# Achieve appropriate accuracy, robustness and cybersecurity

- **Record type**: Obligation
- **Instrument**: Regulation (EU) 2024/1689 — Artificial Intelligence Act
- **Jurisdiction**: European Union
- **Category**: accuracy_robustness_security
- **Binding**: Yes
- **Applies from**: 2027-12-02
- **Provision**: Article 15

## In brief

Achieve appropriate accuracy, robustness and cybersecurity is a legal requirement under the EU AI Act in the European Union (Article 15). High-risk AI systems must achieve an appropriate level of accuracy, robustness and cybersecurity and perform consistently throughout their lifecycle. It applies from 2 December 2027. The record carries 2 evidence examples and mappings to 3 frameworks.

## What the duty requires

High-risk AI systems must achieve an appropriate level of accuracy, robustness and cybersecurity and perform consistently throughout their lifecycle. Accuracy levels and metrics must be declared in the instructions; systems must be resilient to errors, faults and inconsistencies, address feedback loops in continuously learning systems, and resist attempts to alter use or performance, including data poisoning, model poisoning, adversarial examples and confidentiality attacks.

## What an organisation does about it

Include AI-specific threat modelling and adversarial testing in your security programme.

## Controls that meet this duty

- Adversarial and red-team testing for generative AI (supports): https://aipolicytracker.org/controls/genai-red-team-testing
- Accuracy, robustness, fairness and security testing (satisfies): https://aipolicytracker.org/controls/accuracy-robustness-security-testing
- Post-deployment monitoring and drift detection (supports): https://aipolicytracker.org/controls/post-market-monitoring-and-drift-detection

## Parent instrument

- Regulation (EU) 2024/1689 — Artificial Intelligence Act
  - Record: https://aipolicytracker.org/policies/eu-ai-act
  - Context file: https://aipolicytracker.org/policies/eu-ai-act.md

## Provenance

- **Permanent id**: AIPT-OBL-0012 (https://aipolicytracker.org/id/AIPT-OBL-0012; never changes or gets reused)
- **Record page**: https://aipolicytracker.org/obligations/eu-ai-act-accuracy-robustness-cybersecurity
- **Official source**: https://eur-lex.europa.eu/eli/reg/2024/1689/oj
- **Provision**: Article 15
- **Review status**: pending review
- **Confidence**: medium
- **Facts last confirmed**: never confirmed against the official source
- **Retrieved**: 2026-10-27
- **Licence**: https://creativecommons.org/licenses/by/4.0/
- **Cite as**: AIPolicyTracker (2026). "Achieve appropriate accuracy, robustness and cybersecurity (EU AI Act)" [AIPT-OBL-0012, not yet verified]. https://aipolicytracker.org/id/AIPT-OBL-0012 (accessed 27 October 2026).

> This record is a structured summary with a link to the official text. It is not legal advice. Open the official source before relying on any date or duty. How current each record type must be is published at https://aipolicytracker.org/verification; what a record must carry at all is published at https://aipolicytracker.org/coverage.