ETSI EN 304 223: Securing Artificial Intelligence (SAI) – Baseline Cyber Security Requirements for AI Models and Systems

ETSI EN 304 223 is a landmark European standard, published in early 2026, that establishes the first globally applicable baseline for securing artificial intelligence models and systems throughout their entire lifecycle. It moves beyond traditional cybersecurity by specifically addressing AI-unique vulnerabilities—such as data poisoning, model inversion, and indirect prompt injection—and organizes its requirements into five distinct phases: secure design, development, deployment, maintenance, and end-of-life. By defining 13 core security principles and clear roles for developers, system operators, and data custodians, the standard provides a technical foundation that aligns with major regulations like the EU AI Act, ensuring that AI systems are resilient, transparent, and secure by design across international markets.

Publication's URL

https://www.etsi.org/deliver/etsi_en/304200_304299/

Additional documents on this topic