AI Governance Engineer
GitHub

ETSI EN 304 223: baseline cyber-security for AI models and systems

Baseline cyber-security requirements across the AI lifecycle (13 principles over five stages)

By Reviewed

From clause to evidenceThe chain from ETSI EN 304 223 to its evidence record, in 6 steps; the text alternative lists them and the facts under the figure state each in full.ClauseETSI EN 304 223EN 304 223Duty holderNot statedApplies fromNo dateVoluntaryArtefactAI-systemsecurity…LayerLayer 04Runtime Controls& ObservabilityEvidence recordEvidence recordv1Same topic elsewhere: no crosswalk topic files this clause yetAs of 2026-09-24 · illustrative, not a claim of conformity From clause to evidenceThe chain from ETSI EN 304 223 to its evidence record, in 6 steps; the text alternative lists them and the facts under the figure state each in full.ClauseETSI EN 304 223 · EN 304 223Duty holderNot statedApplies fromNo date · VoluntaryArtefactAI-system security controls across…LayerLayer 04Runtime Controls & ObservabilityEvidence recordEvidence record v1Same topic elsewhere: no crosswalk topicfiles this clause yetAs of 2026-09-24illustrative, not a claim of conformity
From clause to evidence Build the artefact, then file every output it produces as a record that names AIGE-OBL-ETSI-304223. Drawn from chapter 08.
Text alternative
  • Clause: ETSI EN 304 223, EN 304 223.
  • Duty holder: Not stated.
  • Applies from: No date, Voluntary.
  • Artefact: AI-system security controls across….
  • Layer: Layer 04 Runtime Controls & Observability.
  • Evidence record: Evidence record v1.
  • Record schema: Evidence record.
  • No crosswalk topic files this clause yet.
Id
AIGE-OBL-ETSI-304223
Instrument
ETSI EN 304 223 standard
Clause
EN 304 223
Applies from
No date Voluntary · Published (V2.1.1, Dec 2025); a voluntary standard

The artefact that evidences it

AI-system security controls across the lifecycle; supply-chain and AIBOM checks; runtime hardening.

Patterns that build it

No pattern in the catalogue names this clause on its "Maps to" line yet; the artefact above is the engineering answer.

Open controls that evidence it

Draft controls in the open control profiles that map to this row: each states a requirement and the evidence it must leave behind.

Source

Chapter 08, section Other jurisdictions, checked against its sources on the review date above.

Machine-readable

Cite this obligation

García Aibar, J. (2026). ETSI EN 304 223: baseline cyber-security for AI models and systems (AIGE-OBL-ETSI-304223). In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0). https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/obligations/aige-obl-etsi-304223. CC BY 4.0

BibTeX

@misc{aige2026obligation,
  author       = {Jorge García Aibar},
  title        = {{ETSI EN 304 223: baseline cyber-security for AI models and systems (AIGE-OBL-ETSI-304223)}},
  howpublished = {In AI Governance Engineering: The Thesis \& Body of Knowledge},
  year         = {2026},
  version      = {0.5.0},
  doi          = {10.5281/zenodo.22956197},
  url          = {https://aigovernanceengineer.com/obligations/aige-obl-etsi-304223},
  note         = {Version 0.5.0}
}