UK AI Cyber Security Code of Practice

Secure maintenance (Principles 11 and 12) – UK AI Cyber Security Code of Practice

UK AI Cyber Security Code of Practice 12.2: Analyse logs for anomalies, breaches and unexpected behaviour

What does 12.2 require?

System operators should review their logs to confirm models keep producing the intended outputs and to catch anomalies, breaches or unexpected behaviour as time passes, such as that caused by data drift or data poisoning.

Maintained by Gerard Blokdyk

Other controls in Secure maintenance (Principles 11 and 12) – UK AI Cyber Security Code of Practice

11.1 Provide security updates and patches, with contingency where updates are impossible
11.2 Treat major updates as a new version and support operators through model changes (11.2 and 11.3)
12.1 Log system and user actions
12.3 Monitor internal states of the AI system where useful for security
12.4 Monitor model and system performance over time for security-relevant change

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All UK AI Cyber Security Code of Practice controls