The technical and organisational measures in place to ensure the safety, security, and robustness of the AI System, including business continuity and disaster recovery plans, should be documented by the client.
A designated individual should be appointed by the client to ensure that the AI System and the IT Systems more broadly are maintained in a physically secure environment.
Regular testing of the client's technical and organisational security measures should be conducted, including the evaluation and remediation of any weaknesses.
AI Systems should be ensured to function in a robust, secure, and safe manner throughout the system's life cycle, with risks being identified, assessed, and managed.
The following stages should be considered when contemplating the life cycle of an AI System, where applicable
- Planning & analysis
- Design
- Development
- Testing
- Implementation & deployment
- Maintenance
- Retirement/Discontinuation
|