Overview
Severity: MEDIUM | Affected: EU AI Office | Category: policy
In a landmark regulatory move, the European Union's AI Office has issued a new directive mandating an 'AI Bill of Materials' (AIBOM) for all AI systems deployed in critical infrastructure sectors, including energy, finance, and healthcare. This policy, effective immediately for all new deployments, requires vendors to provide a comprehensive and transparent inventory of their AI systems. The AIBOM must detail all components, such as training datasets (including data provenance and licensing), pre-trained models, open-source libraries, and key model architecture parameters. The regulation aims to improve the security and resilience of the AI supply chain, enabling organizations to better assess risks, identify vulnerabilities, and respond to incidents. While praised by security advocates for increasing transparency, some industry groups have raised concerns about the operational burden and the potential exposure of proprietary trade secrets.