Providers of General Purpose AI (GPAI) models face extensive obligations under the EU AI Act
– covering the entire lifecycle, from model development and training to system integration, release, and ongoing updates.
Highly compute-intensive models trained with more than 10²⁵ FLOPS are classified as GPAI with systemic risk. These models are subject to additional requirements. In particular, providers must carry out a continuous and comprehensive cyber risk assessment throughout the entire lifecycle.
This assessment must consider not only technical factors but also ethical and societal risks.
More details can be found in the guest Heise article by Mirko Ross here:
https://www.heise.de/hintergrund/KI-Modelle-nach-den-Vorgaben-des-AI-Acts-entwerfen-11076636.html


Konrad Buck
Head of Press and Media Relations
Background & Expert Access for Media
- Detailed insights into asvin’s products and technologies
- Assessments of current cyber incidents and explanations of the security landscape
- Expert commentary and background briefings — our CEO, Mirko Ross, is a recognised expert and experienced media source on the cyber threat landscape, hacktivism, regulation and the use of AI.
I speak openly, fact-based, and without PR spin. I am a former IT journalist with decades of experience in the IT and cybersecurity space, familiar with the highs and lows of the industry. Off-the-record discussions are possible upon request.


