1、Understanding the EU AIAct:Requirements and NextSteps 2024 ISACA.All rights reserved.EmergingTechnologyC O N T E NT S4Introduction4Key Obligations of the EU AI Act5 /Definitions and Scope6 /Exceptions to the AI Act6 /Prohibited Systems7 /High-Risk AI Systems7 /Risk Management8 /Quality Management Sy
2、stem9 /Data and Data Governance9 /Accuracy,Robustness,andCybersecurity10 /Technical Documentation,Recordkeeping,and Transparency10 /Postmarket Monitoring11 /Conformity Assessments11 /Human Oversight11 /AI Literacy12 /Registration12 /Reporting Serious Incidents12 /Requirements for Deployers of High-R
3、isk Systems14 /Transparency Requirements14 /General-Purpose AI Models15 /Innovation Consideration15 /Penalties15Next Steps for Practitioners15 /Timeline16 /Privacy Input17 /AI Inventory and Third-Party Management17 /Document AI System Acquisition and UseProcesses18Conclusion19Acknowledgments2UNDERST
4、ANDING THE EU AI ACT:REQUIREMENTS AND NEXT STEPS 2024 ISACA.All Rights Reserved.A B S T R A C TThe rapid growth in the use of artificial intelligence(AI)technologies,especially generative AI(genAI),is driven bythe myriad benefits these technologies are purported to provide.But in the interest of max
5、imizing efficiency,someenterprises have rushed to adopt AI without considering its risk and the harms it could cause.The EU AI Act putsrequirements in place for certain AI systems used in the European Union and bans certain AI uses.This white paperexplores the AI Acts scope and risk categorization m
6、ethod,in addition to providing a high-level overview of therequirements stipulated in the regulation.It also contains next steps for practitioners looking to be compliant with theAct.3UNDERSTANDING THE EU AI ACT:REQUIREMENTS AND NEXT STEPS 2024 ISACA.All Rights Reserved.IntroductionThe adoption of A