Build a board-ready risk heatmap in minutes — free, no account required

Open tool

Incident Management

GPAI Serious Incident Management

What this control does

Track, document, investigate and report serious incidents involving systemic-risk GPAI models.

How to implement

For a provider of GPAI with systemic risk, define how serious incidents are detected, recorded, investigated and reported. Capture the event, relevant model version, potential consequences and corrective measures. Escalate promptly and use the Article 55 reporting route to the AI Office and national competent authorities where appropriate. Record decisions, information sent and follow-up. Do not automatically apply the Article 73 high-risk-system reporting periods to this separate GPAI duty.

Suggested timing and triggers

On detection of a serious incident; report without undue delay under the applicable GPAI duty; periodic exercises set by the organization.

Evidence examples

Serious-incident record and model identification Escalation and reporting responsibilities Authority notifications and transmission evidence Investigation and corrective-measure records Follow-up and closure decisions

How to check this control

Review a serious incident or a tabletop scenario. Check that the correct GPAI reporting route is used without undue delay and that information about corrective measures and follow-up is traceable.

Recognized by G2 as a Leader

Trusted by customers and rated highly across all categories

GPAI Serious Incident Management | EU AI Act Suggested Control | Tracker Networks