Requirement

Article 17.1 (QMS instructions): Quality management instructions

Oh no! No description found. But not to worry. Read from Tasks below how to advance this topic.

Providers of high-risk AI systems shall put a quality management system in place that ensures compliance with this Regulation. That system shall be documented in a systematic and orderly manner in the form of written policies, procedures and instructions, and shall include at least the following aspects:

  1. the risk management system referred to in Article 9;
  2. the setting-up, implementation and maintenance of a post-market monitoring system, in accordance with Article 72;
  3. procedures related to the reporting of a serious incident in accordance with Article 73;
  4. the handling of communication with national competent authorities, other relevant authorities, including those providing or supporting the access to data, notified bodies, other operators, customers or other interested parties;
  5. systems and procedures for record-keeping of all relevant documentation and information;
  6. resource management, including security-of-supply related measures;
  7. an accountability framework setting out the responsibilities of the management and other staff with regard to all the aspects listed in this paragraph.
See how Cyberday guides you to fulfill this requirement:
This requirement is part of the framework:  
AI Act (Base)
Free compliance assessment:
Best practices
How to implement:
Article 17.1 (QMS instructions): Quality management instructions
This policy on
Article 17.1 (QMS instructions): Quality management instructions
provides a set concrete tasks you can complete to secure this topic. Follow these best practices to ensure compliance and strengthen your overall security posture.

Providers of high-risk AI systems shall put a quality management system in place that ensures compliance with this Regulation. That system shall be documented in a systematic and orderly manner in the form of written policies, procedures and instructions, and shall include at least the following aspects:

  1. the risk management system referred to in Article 9;
  2. the setting-up, implementation and maintenance of a post-market monitoring system, in accordance with Article 72;
  3. procedures related to the reporting of a serious incident in accordance with Article 73;
  4. the handling of communication with national competent authorities, other relevant authorities, including those providing or supporting the access to data, notified bodies, other operators, customers or other interested parties;
  5. systems and procedures for record-keeping of all relevant documentation and information;
  6. resource management, including security-of-supply related measures;
  7. an accountability framework setting out the responsibilities of the management and other staff with regard to all the aspects listed in this paragraph.
Read below what concrete actions you can take to improve this ->
Frameworks that include requirements for this topic:
No items found.

How to improve security around this topic

In Cyberday, requirements and controls are mapped to universal tasks. A set of tasks in the same topic create a Policy, such as this one.

Here's a list of tasks that help you improve your information and cyber security related to
Article 17.1 (QMS instructions): Quality management instructions
Task name
Priority
Task completes
Complete these tasks to increase your compliance in this policy.
Critical
No other tasks found.

How to comply with this requirement

In Cyberday, requirements and controls are mapped to universal tasks. Each requirement is fulfilled with one or multiple tasks.

Here's a list of tasks that help you comply with the requirement
Article 17.1 (QMS instructions): Quality management instructions
of the framework  
AI Act (Base)
Task name
Priority
Task completes
Complete these tasks to increase your compliance in this policy.
Critical
Documentation of stakeholders relevant for the QMS
Critical
High
Normal
Low
2
requirements
Quality and processes
Products, services and customer focus

Documentation of stakeholders relevant for the QMS

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Determining quality-related roles, responsibilities and authorizations
Critical
High
Normal
Low
2
requirements
Quality and processes
Personnel quality responsibilities

Determining quality-related roles, responsibilities and authorizations

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Personnel guidelines for reporting security incidents
Critical
High
Normal
Low
88
requirements
Incident management
Incident management and response

Personnel guidelines for reporting security incidents

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Identification and documentation of risks in AI systems
Critical
High
Normal
Low
2
requirements
AI governance
AI risk and lifecycle management

Identification and documentation of risks in AI systems

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Process for cooperation with competent authorities
Critical
High
Normal
Low
2
requirements
AI governance
AI risk and lifecycle management

Process for cooperation with competent authorities

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Creating post-market monitoring plans for high-risk AI systems
Critical
High
Normal
Low
2
requirements
AI governance
AI risk and lifecycle management

Creating post-market monitoring plans for high-risk AI systems

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Procedure for serious AI incident reporting
Critical
High
Normal
Low
2
requirements
AI governance
AI risk and lifecycle management

Procedure for serious AI incident reporting

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Record-keeping for the AI quality management system
Critical
High
Normal
Low
1
requirements
Quality and processes
Quality management

Record-keeping for the AI quality management system

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Determining needed resources and people for quality work
Critical
High
Normal
Low
3
requirements
Quality and processes
Quality management

Determining needed resources and people for quality work

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Secure handling of property belonging to stakeholders in the development of AI products and services
Critical
High
Normal
Low
1
requirements
AI governance
AI data and model governance

Secure handling of property belonging to stakeholders in the development of AI products and services

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Communication plan for quality management system
Critical
High
Normal
Low
2
requirements
Quality and processes
Personnel quality responsibilities

Communication plan for quality management system

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

The ISMS component hierachy

When building an ISMS, it's important to understand the different levels of information hierarchy. Here's how Cyberday is structured.

Framework

Sets the overall compliance standard or regulation your organization needs to follow.

Requirements

Break down the framework into specific obligations that must be met.

Tasks

Concrete actions and activities your team carries out to satisfy each requirement.

Policies

Documented rules and practices that are created and maintained as a result of completing tasks.

Never duplicate effort. Do it once - improve compliance across frameworks.

Reach multi-framework compliance in the simplest possible way
Security frameworks tend to share the same core requirements - like risk management, backup, malware, personnel awareness or access management.
Cyberday maps all frameworks’ requirements into shared tasks - one single plan that improves all frameworks’ compliance.
Do it once - we automatically apply it to all current and future frameworks.