# Risk management in the Artificial Intelligence Act

arXiv: https://arxiv.org/abs/2212.03109 · HTML: https://mlsanity.com/paper/2212.03109/

## Key facts

- Cited by 16 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 3 Dec 2022.

## Built on by (most cited first, 16 of 16)

- [Auditing large language models: a three-layered approach](https://mlsanity.com/paper/2302.08500/) (2023)
- [Open-Sourcing Highly Capable Foundation Models: An evaluation of risks, benefits, and alternative methods for pursuing open-source objectives](https://mlsanity.com/paper/2311.09227/) (2023)
- [LLM-Safety Evaluations Lack Robustness](https://mlsanity.com/paper/2503.02574/) (2025)
- [Standard Benchmarks Fail -- Auditing LLM Agents in Finance Must Prioritize Risk](https://mlsanity.com/paper/2502.15865/) (2025)
- [AI Cards: Towards an Applied Framework for Machine-Readable AI and Risk Documentation Inspired by the EU AI Act](https://mlsanity.com/paper/2406.18211/) (2024)
- [ChatGPT and Beyond: The Generative AI Revolution in Education](https://mlsanity.com/paper/2311.15198/) (2023)
- [Between Innovation and Oversight: A Cross-Regional Study of AI Risk Management Frameworks in the EU, U.S., UK, and China](https://mlsanity.com/paper/2503.05773/) (2025)
- [Quantifying Robustness: A Benchmarking Framework for Deep Learning Forecasting in Cyber-Physical Systems](https://mlsanity.com/paper/2504.03494/) (2025)
- [Risks of AI-driven product development and strategies for their mitigation](https://mlsanity.com/paper/2506.00047/) (2025)
- [Operationalising AI Regulatory Sandboxes under the EU AI Act: The Triple Challenge of Capacity, Coordination and Attractiveness to Providers](https://mlsanity.com/paper/2509.05985/) (2025)
- [The EU AI Act and the Rights-based Approach to Technological Governance](https://mlsanity.com/paper/2603.22920/) (2026)
- [The Switch, the Ladder, and the Matrix: Models for Classifying AI Systems](https://mlsanity.com/paper/2407.05341/) (2024)
- [Foundations for Risk Assessment of AI in Protecting Fundamental Rights](https://mlsanity.com/paper/2507.18290/) (2025)
- [Retrofitters, pragmatists and activists: Public interest litigation for accountable automated decision-making](https://mlsanity.com/paper/2511.03211/) (2025)
- [Self-Service or Not? How to Guide Practitioners in Classifying AI Systems Under the EU AI Act](https://mlsanity.com/paper/2603.00065/) (2026)
- [Scaling, Lock-In, and Proxy Compliance: A Political Economy of Responsible AI](https://mlsanity.com/paper/2607.28023/) (2026)

## Abstract (arXiv)

The proposed EU AI Act is the first comprehensive attempt to regulate AI in a major jurisdiction. This article analyses Article 9, the key risk management provision in the AI Act. It gives an overview of the regulatory concept behind Article 9, determines its purpose and scope of application, offers a comprehensive interpretation of the specific risk management requirements, and outlines ways in which the requirements can be enforced. This article is written with the aim of helping providers of high-risk systems comply with the requirements set out in Article 9. In addition, it can inform revisions of the current draft of the AI Act and efforts to develop harmonised standards on AI risk management.