ETSI EN 304 223 Securing AI 5.2.1-3: Disaster recovery plans tailored to attacks on AI systems

What does 5.2.1-3 require?

System operators build and adapt their disaster recovery plans so they allow for attacks aimed specifically at AI systems, and should make sure the system can be returned to a known good state.

Maintained by Gerard Blokdyk

Other controls in Clause 5.2: Secure development (Principles 5 to 9) – ETSI EN 304 223 Securing AI

5.2.1-1 Comprehensive asset inventory including interdependencies
5.2.1-2 Processes and tools to track, authenticate, version and secure AI assets
5.2.1-4 Protect sensitive data and sanitise inputs, with proportionate protection of weights
5.2.2-1 Evaluate access control frameworks for APIs, models, data and pipelines
5.2.2-2 Controls on externally offered APIs against attacks on the AI system
5.2.2-3 Dedicated, segregated environments for development and model tuning
5.2.2-4 Publish a clear vulnerability disclosure policy
5.2.2-5 AI system incident management plan and recovery plan

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All ETSI EN 304 223 Securing AI controls