Operators of AI above the compute threshold must run lifecycle risk management and report safety results

Practical action

Track training compute against the decree threshold and prepare a safety report covering risk identification, mitigation and incident monitoring for submission to the ministry.

Who does it apply to?

Operators of AI systems whose cumulative training compute exceeds the Presidential Decree threshold, in practice frontier-scale model developers.

Actors

Provider / developerGeneral-purpose AI model provider

Sectors

Cross-sector / all sectors

Use cases

Generative AI and foundation models

Applies from: 22 January 2026

Which controls meet this duty?

Satisfies: the control, operated properly, does the work the duty asks for. Supports: it contributes but the duty needs more. Each control page lists every other duty it serves, so work done once can be counted once.

• satisfiesPolicyHead of AI safety · annual
  Frontier model safety and security framework

  Serves 9 recorded duties · evidence: Published frontier safety framework, Dangerous-capability evaluation report, Threshold notification to an authority

  Compute tracking, lifecycle risk assessment and reporting to the authority.

• supportsTechnical measureAI security or safety lead · at launch and on material change
  Adversarial and red-team testing for generative AI

  Serves 8 recorded duties · evidence: Red-team exercise report, Red-team rules of engagement and scenario library, Adversarial findings tracker

  Evidence for the risk identification step.

• supportsProcessIncident coordinator · continuous
  AI incident management and regulatory reporting

  Serves 14 recorded duties · evidence: AI incident response playbook, AI incident record, Incident report to an authority

  Incident monitoring and response arm of the risk management system.

Templates that cover this duty

Generated from the records. Free · no account · links emailed to your work address. This duty is cited in each file with its source reference and a link back here.

• AI Risk Register (MIT AI Risk Repository taxonomy)

  Register · XLSX · v4

• ISO/IEC 42001 Gap Assessment and Statement of Applicability

  Assessment · XLSX · v3

• NIST AI RMF ↔ EU AI Act ↔ ISO/IEC 42001 Crosswalk

  Crosswalk · XLSX · v5

• AI Audit Evidence Tracker

  Register · XLSX · v1

All 8 templates that cover it →

What evidence would a reviewer expect?

Framework mappings

Original editorial crosswalks. They cite clause numbers only and reproduce no standard text; confidence reflects how direct the mapping is.

See every South Korea duty mapped this way →

Frequently asked questions

Cite this record

AIPolicyTracker (2026). “Operators of AI above the compute threshold must run lifecycle risk management and report safety results (AI Basic Act)” [AIPT-OBL-0062, verified 26 September 2026 by Bhaskar Bhatt]. https://aipolicytracker.org/id/AIPT-OBL-0062 (accessed 8 November 2026). Data licensed CC BY 4.0.

Permanent id AIPT-OBL-0062: it never changes or gets reused, and its address keeps working if this page moves.

Cite the official text alongside it: Framework Act on the Development of Artificial Intelligence and Establishment of a Foundation for Trust (AI Basic Act, Act No. 20676), Korea Ministry of Government Legislation, National Law Information Center, https://www.law.go.kr/lsInfoP.do?lsiSeq=268543.

@misc{aipolicytracker2026_operatorsofaiabovethecom,
  author       = {{AIPolicyTracker}},
  title        = {{Operators of AI above the compute threshold must run lifecycle risk management and report safety results (AI Basic Act)}},
  year         = {2026},
  howpublished = {\url{https://aipolicytracker.org/obligations/south-korea-ai-basic-act-art-32-safety-measures-for-high-performance-ai}},
  url          = {https://aipolicytracker.org/obligations/south-korea-ai-basic-act-art-32-safety-measures-for-high-performance-ai},
  urldate      = {2026-11-08},
  note         = {Data licensed CC BY 4.0. Accessed 8 November 2026}
}

Change history

Similar obligations in other instruments

• Manage systemic risk for high-impact general-purpose models — EU AI Act, European Union
• Large frontier developers must publish a frontier AI framework — California SB 53, California (United States)
• Large frontier developers must send periodic summaries of catastrophic-risk assessments to the state — California SB 53, California (United States)
• Measure and test trustworthiness characteristics (Measure) — NIST AI RMF, United States (voluntary)