Analysis of how SbD-ToE responds to the obligations of Regulation (EU) 2024/1689 (AI Act) - cybersecurity, record-keeping, human oversight, transparency, post-market monitoring and serious incidents of AI systems, with accuracy and robustness pending a future round
The Manual's requirements that apply under context CTX-AIA-RE, by level and grade, with each floor that the regime elevates and its legal basis.
Cross-cutting map of the secure development process for systems with AI agents — from mandate to kill-switch, with stops in each SbD-ToE chapter and a cross-reference to the AI Act, NIS2, DORA and the CRA
Framing of the normative analysis chapter, which shows how SbD-ToE intersects with different normative instruments and regulations
Cross-referencing SbD-ToE with the AI Act, CRA, DORA, NIS2, GDPR — with the MCP (canon and indexed cross-checks) and the web manual for content later than the snapshot.
Guidance for products that are simultaneously a high-risk AI system (AI Act) and a product with digital elements (CRA) - presumption of conformity under Art. 12 of the CRA and a single conformity assessment on the cybersecurity axis
Practical roadmap for implementing SbD-ToE in line with the requirements of Regulation (EU) 2024/1689 (AI Act) - mapping of articles to actions, by role and risk category