Providers of General Purpose AI (GPAI) models face extensive obligations under the EU AI Act

– covering the entire lifecycle, from model development and training to system integration, release, and ongoing updates.

Highly compute-intensive models trained with more than 10²⁵ FLOPS are classified as GPAI with systemic risk. These models are subject to additional requirements. In particular, providers must carry out a continuous and comprehensive cyber risk assessment throughout the entire lifecycle.
This assessment must consider not only technical factors but also ethical and societal risks.

More details can be found in the guest Heise article by Mirko Ross here:

https://www.heise.de/hintergrund/KI-Modelle-nach-den-Vorgaben-des-AI-Acts-entwerfen-11076636.html

GPAI Models Cybersecurity
Konrad Buck

Konrad Buck

Head of Press and Media Relations

Background & Expert Access for Media

We offer journalists access to in-depth background information beyond our publicly available materials, including:
  • Detailed insights into asvin’s products and technologies

  • Assessments of current cyber incidents and explanations of the security landscape

  • Expert commentary and background briefings — our CEO, Mirko Ross, is a recognised expert and experienced media source on the cyber threat landscape, hacktivism, regulation and the use of AI.
Media contact
I speak openly, fact-based, and without PR spin. I am a former IT journalist with decades of experience in the IT and cybersecurity space, familiar with the highs and lows of the industry. Off-the-record discussions are possible upon request.