BSI – Kriterienkatalog für KI-Cloud-Dienste – AIC4 – Kriterienkatalog für KI-Cloud-Dienste – AIC4 (bund.de) and AI Cloud Service Compliance Criteria Catalogue (bund.de)
The AI Cloud Service Compliance Criteria Catalogue (AIC4) is the world’s first concrete criteria catalog with requirements for the lifecycle of artificial intelligence from an official organization. It is also the first response to calls from the market, the German government, and the EU Commission for transparent criteria for robust artificial intelligence.
Cloud computing describes a model in which system elements of a computer, such as a hard drive, memory, or printer, are provided as a service in the form of servers, storage, or applications, usually over the Internet and independent of the device.
The AIC4 is designed to complement the Cloud Computing Compliance Criteria Catalog (C5). The C5 is a general set of minimum requirements for secure cloud computing that are relevant to any cloud service. The AIC4, on the other hand, adds specific criteria that are additionally relevant when using machine learning methods. The criteria in the AIC4 address security and robustness, performance and functionality, reliability, data quality, data management, accountability, and bias. They cover the entire lifecycle of AI services, including development, testing, validation, and operations.
The goal is to make the information security of an AI cloud service transparent on the basis of a standardized test. This can be used by cloud customers as part of their own risk analysis. The AIC4 criteria catalog is used by cloud providers, auditors and cloud customers. Each of these parties has an obligation to cooperate with respect to information security.
AIC4 creates standard baseline for trusted AI
The AIC4 is the first standard framework with concrete criteria for the determination of security, transparency and robustness of AI services. It builds trust between AI service providers and their users through its use in testing AI and designing appropriate governance structures for AI. The catalog is in line with the requirements of regulators and auditors, thereby enhancing the usefulness and informative value of the practical application of AI services. The AIC4 lays the foundation for the harmonization of the German AI market. It creates a uniform starting point for the trustworthy use of AI.
To the German translation of this article: Cloud Computing – Computer-Dienstleistung im Internet