Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

Estonia: Information System Authority publishes guidance on risks and controls for AI and ML

On May 27, 2024, the Estonian Information System Authority, together with Cybernetica AS, published a guidance on risks and controls for artificial intelligence (AI) and machine learning (ML) systems.

The guidance analyses the legal aspects of AI and ML and the risks associated with AI technologies. Additionally, the guidance provides control measures companies can utilize to mitigate and decrease such risks stemming from the use of AI applications.

Examples of control measures provided include:

  • information security organization controls (including defining tasks and obligations related to AI systems and communicating to all employees, establishing secure use guidelines);
  • personnel controls (including instruction and training);
  • compliance management controls;
  • AI-specific controls (improvement of the quality and safety of AI systems and controls for technological attacks against AI systems); and
  • controls for societal risks.

You can read the press release here and the guidance here.