firmsfinder.eu · RRVI
Demonstrație. Documentele de mai jos sunt șabloane randate cu date demonstrative sau interne. Nu atestă conformitatea acestui site sau a unei firme cu Regulamentul (UE) 2024/1689 și nu sunt aprobate de nicio persoană responsabilă.
PROC-010-FIRMA-DEMONSTRATIVA-67fcf9d0 · verifică
PROC-010
AI Incident Reporting Procedure
Document Information
| Field | Value |
|---|
| Document ID | PROC-010 |
| Title | AI Incident Reporting Procedure |
| Repository | RRVI™ |
| Module | 10 – Incident Reporting |
| Company | Firmă demonstrativă |
| Version | 0.0.0-demo |
| Status | Draft (demo, neaprobat) |
1. Purpose
This procedure defines how Firmă demonstrativă identifies, reports, investigates, documents and resolves incidents involving Artificial Intelligence systems.
The objective is to ensure that AI-related incidents are managed consistently, corrective actions are implemented, and objective evidence is maintained in accordance with Regulation (EU) 2024/1689 (EU AI Act).
2. Scope
This procedure applies to:
- internally developed AI systems;
- externally acquired AI systems;
- proof-of-concept AI systems;
- production AI systems;
- AI infrastructure;
- personnel using AI systems.
3. Responsibilities
Managing Director
Responsible for approving major corrective actions where required.
AI Governance Owner
Responsible for:
- coordinating incident management;
- reviewing incident reports;
- maintaining the Incident Reporting Register.
AI System Owner
Responsible for:
- reporting incidents;
- supporting investigations;
- implementing corrective actions.
AI Users
Responsible for:
- immediately reporting suspected incidents;
- preserving available evidence;
- cooperating during investigations.
Compliance Owner
Responsible for:
- assessing regulatory impact;
- determining notification requirements;
- supporting audits and inspections.
4. Procedure
Step 1 — Detect Incident
Identify any event involving an AI system that may affect:
- availability;
- integrity;
- confidentiality;
- accuracy;
- compliance;
- safety.
Step 2 — Report Incident
Immediately notify the AI Governance Owner.
Record:
- date;
- time;
- AI System;
- incident description;
- reporter.
Step 3 — Classify Incident
Determine:
- severity;
- business impact;
- regulatory impact;
- operational impact.
Assign a priority.
Step 4 — Investigate
Determine:
- root cause;
- affected systems;
- affected data;
- affected users;
- corrective actions required.
Step 5 — Correct
Implement corrective actions.
Verify effectiveness.
Document completion.
Step 6 — Update Register
Open:
REG-010_Incident_Reporting_Register.md
Record:
- incident number;
- classification;
- corrective actions;
- closure date.
Step 7 — Review
Review incidents:
- after closure;
- during management review;
- after significant AI changes;
- before regulatory inspections.
5. Records
This procedure produces:
- Incident Reporting Register;
- Incident Reporting Evidence;
- Incident Reporting Declaration.
6. References
- Regulation (EU) 2024/1689 (EU AI Act)
- DOD-010 Incident Reporting Policy
- DOD-009 Logging and Monitoring Policy
- REG-010 Incident Reporting Register
- EVID-010 Incident Reporting Evidence
- DEC-010 Incident Reporting Declaration
7. Approval
Prepared by
[persoană responsabilă, nepublicat]
Company
Firmă demonstrativă
Status
Approved