AI Act Article 9 is the section of the EU AI Act that sets out requirements for a risk management system for certain AI systems. It requires an ongoing, documented process to identify, analyse, estimate, evaluate and mitigate risks throughout the system’s lifecycle, with testing and review before and after deployment.
What Article 9 Requires in Practice
Article 9 turns AI risk management into an ongoing control process, not a one-time assessment. For systems in scope, the organisation has to identify relevant risks, evaluate them, and keep updating mitigation as the system, its data, and its use context change.
That matters because AI risk rarely stays static. Model updates, prompt changes, new data sources, changed user behaviour, and deployment into a different environment can all alter the risk profile after an initial review has been completed.
Lifecycle Risk Management and Review
The Article 9 model is explicitly lifecycle-based, which means risk work begins before deployment and continues after the system is in use. Pre-deployment testing helps surface foreseeable failure modes, while post-deployment review catches issues that only appear under real operating conditions.
This lifecycle approach is especially important for systems that can affect safety, rights, access, or consequential decisions. A documented process helps show how the organisation moved from identifying a risk to deciding whether it was acceptable, mitigated, or needed a change in design or use.
Testing, Documentation, and Evidence
Article 9 expects more than informal risk discussions. Organisations need evidence that risks were analysed, the mitigation choices were documented, and the system was tested in ways that are proportionate to the intended use and foreseeable misuse.
That evidence becomes part of the broader compliance story alongside classification, technical documentation, and downstream governance. It should be specific enough to explain what was tested, what changed as a result, and why the remaining risk was considered acceptable.
How Article 9 Connects to Broader AI Governance
Article 9 is one of the core operational requirements that turns eu ai act compliance into a managed programme rather than a paper exercise. It works best when the organisation treats AI risk as a governed process with clear ownership, recurring review, and traceability across product, legal, security, and assurance functions.
For many teams, the practical challenge is not understanding the concept of risk management, but keeping the process live after launch. A system can drift quickly if oversight depends on a single launch review instead of continuous monitoring and documented reassessment.
Risk and Threat Considerations
Article 9 reduces the risk that an AI system is deployed with hidden or misunderstood failure modes, but the control only works if risk review remains current. If the organisation stops testing after launch, changes in data, behaviour, or context can leave material risks unrecognised until they affect users or operations.
Failure mechanism: Risk assumptions become stale when the system, its inputs, or its deployment environment changes, so earlier mitigation no longer matches actual behaviour.
Impact: Undetected drift or misuse can lead to unsafe outputs, unfair decisions, operational disruption, or compliance failure, especially where the system is used at scale or in a high-impact context.
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
NIST AI RMF sets the technical controls, while EU AI Act and ISO/IEC 42001:2023 define the regulatory obligations.
| Framework | Control / Reference | Relevance |
|---|---|---|
| EU AI Act | Risk management system | Article 9 directly establishes the AI Act's risk management system requirement for in-scope AI systems. |
| Recommendation — Maintain a documented lifecycle risk management process that identifies, tests, mitigates, and reviews AI risks continuously. | ||
| NIST AI RMF | Govern / Map / Measure / Manage | Article 9 operationalises continuous AI risk governance, measurement, and mitigation across the system lifecycle. |
| Recommendation — Apply AI RMF governance and measurement practices to keep risks identified, assessed, and mitigated throughout deployment. | ||
| ISO/IEC 42001:2023 | AI management system | Article 9 aligns with an organisation-wide AI management system that documents risk treatment and review. |
| Recommendation — Embed Article 9 risk review and evidence handling into the AI management system and its recurring assurance cycle. | ||
Practitioner Guidance
Why practitioners should care: Article 9 is the control that forces AI risk management to be evidence-backed and continuous, rather than informal and reactive. Teams should treat it as the backbone of the system’s assurance record, not just a legal checkbox.
Common misunderstanding: A one-time model review is not enough. The required process has to survive retraining, prompt changes, new integrations, changing user populations, and new operational conditions.
Practitioner takeaway: The most defensible Article 9 posture is one where testing, mitigation decisions, and post-deployment review are all versioned and traceable.
Related resources from NHI Mgmt Group
- Guide: Agentic AI Compliance Guide
- What breaks when DSPM is used as the main control for EU AI Act Article 10?
- Should organisations use the EU AI Act Article 9 process or rely on internal model governance alone?
- EU AI Act Article 4
- How should security teams prove DORA compliance for AI agents that act autonomously?