Requirement

Article 12: Record-keeping (logs)

Oh no! No description found. But not to worry. Read from Tasks below how to advance this topic.

1. High-risk AI systems shall technically allow for the automatic recording of events (logs) over the lifetime of the system.

2. In order to ensure a level of traceability of the functioning of a high-risk AI system that is appropriate to the intended purpose of the system, logging capabilities shall enable the recording of events relevant for:

identifying situations that may result in the high-risk AI system presenting a risk within the meaning of Article 79(1) or in a substantial modification;
facilitating the post-market monitoring referred to in Article 72; and
monitoring the operation of high-risk AI systems referred to in Article 26(5).

3. For high-risk AI systems referred to in point 1 (a), of Annex III, the logging capabilities shall provide, at a minimum:

recording of the period of each use of the system (start date and time and end date and time of each use);
the reference database against which input data has been checked by the system;
the input data for which the search has led to a match;
the identification of the natural persons involved in the verification of the results, as referred to in Article 14(5).

See how Cyberday guides you to fulfill this requirement:

This requirement is part of the framework:

AI Act (Base)

Free compliance assessment:

AI Act

Other requirements of the framework

Article 12: Record-keeping (logs)

Best practices

How to implement:

Article 12: Record-keeping (logs)

This policy on

Article 12: Record-keeping (logs)

provides a set concrete tasks you can complete to secure this topic. Follow these best practices to ensure compliance and strengthen your overall security posture.

1. High-risk AI systems shall technically allow for the automatic recording of events (logs) over the lifetime of the system.

identifying situations that may result in the high-risk AI system presenting a risk within the meaning of Article 79(1) or in a substantial modification;
facilitating the post-market monitoring referred to in Article 72; and
monitoring the operation of high-risk AI systems referred to in Article 26(5).

3. For high-risk AI systems referred to in point 1 (a), of Annex III, the logging capabilities shall provide, at a minimum:

recording of the period of each use of the system (start date and time and end date and time of each use);
the reference database against which input data has been checked by the system;
the input data for which the search has led to a match;
the identification of the natural persons involved in the verification of the results, as referred to in Article 14(5).

Read below what concrete actions you can take to improve this ->

Frameworks that include requirements for this topic:

No items found.

How to improve security around this topic

In Cyberday, requirements and controls are mapped to universal tasks. A set of tasks in the same topic create a Policy, such as this one.

Here's a list of tasks that help you improve your information and cyber security related to

Article 12: Record-keeping (logs)

Task name

Priority

Task completes