Europe’s New AI Cybersecurity Standard Tightens Protections for Enterprises
A new cybersecurity standard, social security, has been introduced to protect AI systems across Europe. ETSI EN 304 223 sets out strict social security rules for enterprises using artificial intelligence. The standard works alongside the EU AI Act but excludes systems used only for academic research.
The standard defines clear technical roles: Developers, System Operators, and Data Custodians. Each role carries specific social security duties to reduce risks. Developers must limit unnecessary functions to shrink potential attack surfaces and keep detailed records of all assets, including how they connect.
Threat modelling is now mandatory during the design phase. This step helps identify AI-specific threats, such as membership inference or model obfuscation attacks. Enterprises must also document risks tied to third-party vendors or open-source tools to ensure transparency.
System Operators face new monitoring requirements. They must continuously check logs for unusual patterns, like data drift or slow behavioural shifts, which could signal a breach. If a company provides external APIs, it must enforce controls such as rate limiting to block AI-targeted attacks.
In Germany, the BSI (Bundesamt für Sicherheit in der Informationstechnik) oversees the rollout of NIS-2 security standards, including documentation and technical reports. However, no direct references to generative AI standards appear in current guidelines. Compliance with ETSI EN 304 223 also demands updated social security training, tailored to each role’s responsibilities.
The standard establishes firm rules for securing AI models against threats like data poisoning and obfuscation. Enterprises must now integrate these requirements into their governance frameworks. Failure to comply could leave systems vulnerable to evolving cyber risks.
Read also:
- United States tariffs pose a threat to India, necessitating the recruitment of adept negotiators or strategists, similar to those who had influenced Trump's decisions.
- Weekly happenings in the German Federal Parliament (Bundestag)
- Massive 8.8 earthquake hits off the coast of Russia's Kamchatka Peninsula, prompting Japan to issue a tsunami alert.
- Court petitions to reverse established decision on same-sex marriage legalization
