Demonstrație. Documentele de mai jos sunt șabloane randate cu date demonstrative sau interne. Nu atestă conformitatea acestui site sau a unei firme cu Regulamentul (UE) 2024/1689 și nu sunt aprobate de nicio persoană responsabilă.

DOD-010-FIRMA-DEMONSTRATIVA-baf78f5b · verifică

DOD-010

AI Incident Reporting Policy

Document Information

Field	Value
Document ID	DOD-010
Title	AI Incident Reporting Policy
Repository	RRVI™
Module	10 – Incident Reporting
Company	Firmă demonstrativă
Version	0.0.0-demo
Status	Draft (demo, neaprobat)

1. Purpose

The purpose of this policy is to establish the principles and requirements for identifying, reporting, recording, investigating and resolving incidents involving Artificial Intelligence systems used, developed or deployed by Firmă demonstrativă.

This policy supports compliance with Regulation (EU) 2024/1689 (EU AI Act) by ensuring that AI-related incidents are managed consistently, documented objectively and resolved in a timely manner.

2. Scope

This policy applies to:

internally developed AI systems;
externally acquired AI systems;
proof-of-concept AI systems;
production AI systems;
AI infrastructure;
personnel using AI systems on behalf of Firmă demonstrativă.

3. Policy Statement

Firmă demonstrativă shall establish and maintain an Incident Reporting process for all AI systems.

Every AI-related incident shall be:

identified;
reported;
documented;
investigated;
resolved;
reviewed.

4. Incident Management Principles

Incident management shall ensure:

rapid detection;
timely reporting;
objective investigation;
root cause analysis;
corrective actions;
preventive actions;
complete documentation.

5. Incident Categories

Incidents may include:

incorrect AI outputs;
security incidents;
data quality issues;
system failures;
human oversight failures;
unauthorized access;
regulatory non-compliance;
service interruption.

6. Roles and Responsibilities

Managing Director

Approves major corrective actions.

AI Governance Owner

Responsible for:

coordinating incident management;
reviewing incident reports;
maintaining the Incident Register.

AI System Owner

Responsible for:

reporting incidents;
supporting investigations;
implementing corrective actions.

AI Users

Responsible for:

immediately reporting suspected AI incidents;
preserving relevant evidence;
cooperating during investigations.

Compliance Owner

Responsible for:

assessing regulatory impact;
supporting audits and inspections;
monitoring incident trends.

7. Review Requirements

This policy shall be reviewed:

annually;
after significant incidents;
after regulatory updates;
after major AI system changes;
before regulatory inspections.

8. Compliance

Compliance with this policy is mandatory.

Failure to report significant AI incidents may result in corrective actions and compliance review.

9. References

Regulation (EU) 2024/1689 (EU AI Act)
DOD-001 AI System Inventory Policy
DOD-002 Risk Classification Policy
DOD-009 Logging and Monitoring Policy
REG-010 Incident Reporting Register

10. Approval

Prepared by

[persoană responsabilă, nepublicat]

Company

Firmă demonstrativă

Status

Approved