AI systems can serve as gateways for cyberattacks and data manipulation. Cyber- and data security aspects should therefore be considered for all elements of the AI lifecycle. This is the only way to ensure that AI can be operated securely and resiliently, particularly within the framework of ICT risk management in accordance with DORA. The following guidance contains aspects which, in contrast to development and operation, apply across the entire lifecycle and incorporate AI-specific features.
guidance