This service is aimed at organizations that develop, integrate, or use artificial intelligence systems, especially those operating high-impact AI in sectors such as finance, insurance, healthcare, energy, mobility, public administration, retail, and telecommunications. It also applies to departments that manage data sensitivity: HR, security, marketing, operations, and product.
EU AI Act
Assessment and Support for
EU AI Act Compliance
We evaluate the impact of the AI Act on GDPR and design alignment plans. We provide expert support to help you implement secure, ethical, and transparent compliance for artificial intelligence systems within your organization.
Phase I, Risk Assessment
Personal data security and privacy
Phase II, Gap Assessment
Regulatory gap analysis
Phase III, Alignment Plan
Mitigation and roadmap
Phase IV, Implementation Support
Procedures, documentation, and training
Service
Who is it for?
High-Risk AI as classified by the AI Act
Systems with human interaction and automated processing
Internal models developed by the organization
Providers and integrators of AI solutions
Third-party integrated AI, MLOps platforms, Cloud, and Edge
Benefits
Benefits for your organization
Proactive regulatory compliance: avoiding fines and product shutdowns
Early identification of critical risks and incident prevention
Reduction of privacy and security risks for clients and reputation
Protection of data, models, and intellectual property
Increased trust and transparency in the use of AI
Robust governance and acceleration of AI system approval
Methodology
Service phases
Metodología
Cómo trabajamos
01Security and Privacy Risk Assessment
Analysis of the impact of AI systems on the security and privacy of personal data. The risks associated with automated processing, risk classification according to the AI Act, and exposure to technical and regulatory vulnerabilities are evaluated.
02Gap Analysis
Gap analysis between the organization’s current state and the requirements of the EU AI Act and GDPR. Areas of non-compliance are identified, and the necessary actions to achieve compliance are prioritized.
03Alignment and Mitigation Plan
Roadmap design with the necessary alignment and mitigation measures. It includes prioritization of actions, definition of responsibles, timelines, and resources to close the gaps identified in the previous phase.
04Implementation Support
Implementation of human oversight, risk management, and monitoring procedures. Support in the creation of mandatory documentation (explainability, traceability, logs, system sheets), implementation of AI incident protocols, guidance on high-risk AI certifications, and training for technical, legal, and business teams.
Scope of service
What this service covers
AI risk classification
Categorization of AI systems according to the risk levels defined by the European Artificial Intelligence Act.
GDPR impact assessment
Analysis of the impact of AI systems on personal data protection and GDPR compliance.
Human oversight
Implementation of human oversight procedures for high-risk AI systems.
Explainability and traceability
Mandatory documentation on the operation, decisions, and records of AI systems.
AI risk management
Processes for the identification, assessment, and mitigation of risks associated with the use of artificial intelligence.
Incident protocols
Implementation of management and reporting protocols for incidents related to AI systems.
High-Risk AI Certification
Support during the certification process for AI systems classified as high-risk.
Model protection and IP
Data protection measures, AI models, and intellectual property in the face of information leaks.
Training and awareness
Training programs for technical, legal, and business teams on the AI Act and GDPR.
Testimonials
What our clients say
Working with Internet Security Auditors has been a highly satisfactory experience. Their support in migrating to the ISO/IEC 27001:2022 standard, conducting internal audits, and the PCI DSS certification process has been fundamental in strengthening our information security management system.
The strategic support of Internet Security Auditors as CISOaaS has been fundamental in strengthening our internal team. Their expertise perfectly complements our CISO's work and has allowed us to advance our cybersecurity maturity more rapidly.
On behalf of Outsourcing SAS BIC, we would like to express our gratitude for your commitment and dedication during the implementation of PCI DSS compliance in our call center. We successfully established a secure environment in accordance with the most demanding requirements of the payment industry.
Working with Internet Security Auditors has been a positive experience in every respect. Their team combines solid technical expertise with a great willingness for collaborative work, which has strengthened our security posture and regulatory compliance.
As CFO of Saint Louis University – Madrid Campus, I have had the opportunity to work with Internet Security Auditors. They have been our indispensable partner in implementing the requirements set forth by GDPR regulations. I would like to highlight their availability to resolve questions and their ability to develop a legal framework with concrete and understandable actions…
As CFO of Fleurop - Interflora Spain, we have worked with Internet Security Auditors for years in the field of consulting and GDPR compliance. As Interflora is a company 100% focused on online commerce, the professional services of Internet Security Auditors provide us with support, security, and the peace of mind that all our activity is aligned with GDPR compliance.
As CISO at Intaremit S.A., we place the utmost importance on logical security. This is not only due to the fact that PCI-CPP regulations require us to perform four internal and external vulnerability scans and an annual internal and external pen test, but also because of the security and peace of mind our company aims to provide to each and every one of our clients. We have been working and collaborating with Internet Security Auditors for over 10 years due to their experience, commitment, and accessibility; therefore, I recommend them without hesitation.
At Grupo Arbulu, we have worked closely with Internet Security Auditors to implement advanced cybersecurity measures. Thanks to their expertise, we have significantly improved our ability to detect and mitigate cyber risks. Their comprehensive audits and customized solutions have strengthened our security infrastructure, ensuring the protection of our data and the continuity of our operations.
As CEO of Beruby, we worked with Internet Security Auditors when we had to urgently perform a PCI DSS Attestation of Compliance. The entire process was extremely fast, efficient, and professional. Their team provided us with excellent support, demonstrating great technical knowledge and commitment. We undoubtedly recommend their services to any company in need of cybersecurity solutions.
At Grupo AR, we highly value the brand protection service provided by Internet Security Auditors for its comprehensive and proactive approach. Their highly qualified team allows us to identify and mitigate risks that could affect the AR Construcciones brand and its various companies.
Frequently Asked Questions
We answer your questions
What is the EU AI Act?
It is Regulation (EU) 2024/1689, the world’s first comprehensive regulatory framework for artificial intelligence. It establishes harmonized rules for the development, marketing, and use of AI systems in the European Union, classifying them according to their level of risk: unacceptable, high, limited, and minimal.
Who does the AI Act affect?
It affects providers that develop or market AI systems, those that deploy them, and importers and distributors. It applies both to organizations within the EU and to those outside it that offer AI systems whose output is used in European territory.
What is a high-risk AI system?
These are AI systems used in sensitive areas such as critical infrastructure, education, employment, essential services, the administration of justice, migration control, or biometrics. These systems are subject to strict requirements for transparency, human oversight, risk management, and technical documentation.
How does the AI Act relate to the GDPR?
The AI Act complements the GDPR. Many AI systems process personal data in an automated manner, which triggers obligations under both regulations. This service jointly evaluates the impact of AI systems on both the AI Act and personal data protection.
What are the penalties for non-compliance?
Sanctions can reach up to 35 million euros or 7% of the total annual worldwide turnover. The amount varies depending on the severity of the infringement, the type of organization, and whether it involves prohibited practices, non-compliance with high-risk obligations, or the provision of incorrect information.
Contact
Do you need to evaluate the compliance of your AI systems?
Tell us about your situation and our team will contact you to provide guidance or schedule a technical call.
Request information
Global Presence
Our offices
Bogotá
Transversal 22 # 98-82, Porta 100 Building, Office 1003
110221 Bogotá (Colombia)
25
years of experience in cybersecurity
Contact us