Demonstrație. Documentele de mai jos sunt șabloane randate cu date demonstrative sau interne. Nu atestă conformitatea acestui site sau a unei firme cu Regulamentul (UE) 2024/1689 și nu sunt aprobate de nicio persoană responsabilă.

PROC-002-FIRMA-DEMONSTRATIVA-f8e11911 · verifică

PROC-002

Risk Classification Procedure

Document Information

Field	Value
Document ID	PROC-002
Title	Risk Classification Procedure
Repository	RRVI™
Module	02 – Risk Classification
Company	Firmă demonstrativă
Version	0.0.0-demo
Status	Draft (demo, neaprobat)

1. Purpose

This procedure defines the process used by Firmă demonstrativă to classify Artificial Intelligence systems according to Regulation (EU) 2024/1689 (EU AI Act).

The objective is to ensure that every AI system receives a documented and repeatable risk classification before operational deployment.

2. Scope

This procedure applies to:

all AI systems recorded in the AI System Inventory;
internally developed AI systems;
externally acquired AI services;
AI-enabled software;
proof-of-concept implementations;
production deployments.

3. Responsibilities

Managing Director

approves the overall classification process.

AI Governance Owner

coordinates risk classification;
maintains the Risk Classification Register;
initiates reviews.

AI System Owner

provides technical and business information;
supports the assessment process;
reports significant changes.

Compliance Owner

verifies regulatory alignment;
validates classification decisions;
supports inspections and audits.

4. Procedure

Step 1 — Identify the AI System

Confirm that the AI system is recorded in:

REG-001_AI_System_Inventory_Register.md

If the AI system is not registered, complete the AI System Inventory process before continuing.

Step 2 — Collect Information

Gather the following information:

AI System ID;
AI System Name;
Provider;
Intended Purpose;
Business Process;
Users;
Deployment Context;
Human Oversight;
Data Categories Processed.

Step 3 — Assess Risk

Evaluate the AI system against the EU AI Act categories:

Prohibited AI Practices;
High-Risk AI Systems;
Limited-Risk AI Systems;
Minimal-Risk AI Systems.

Step 4 — Record Classification

Document the assessment in:

REG-002_Risk_Classification_Register.md

Record:

classification result;
justification;
reviewer;
assessment date.

Step 5 — Independent Review

The AI Governance Owner shall review the assessment for completeness and consistency.

Where necessary, the Compliance Owner shall validate the regulatory interpretation.

Step 6 — Approval

The approved classification shall become the official classification for the AI system.

Step 7 — Reassessment

Risk classification shall be repeated whenever:

intended purpose changes;
deployment changes;
provider changes;
functionality changes;
legislation changes;
significant incidents occur.

5. Records

This procedure produces:

Risk Classification Register;
Risk Classification Evidence;
Risk Classification Declaration.

6. References

Regulation (EU) 2024/1689 (EU AI Act)
DOD-002 Risk Classification Policy
REG-001 AI System Inventory Register
REG-002 Risk Classification Register
EVID-002 Risk Classification Evidence
DEC-002 Risk Classification Declaration

7. Approval

Prepared by

[persoană responsabilă, nepublicat]

Company

Firmă demonstrativă

Status

Approved