EU AI Act glossary · Obligations· Art. 9
Risk management system
Article 9 requires providers of high-risk AI to establish, run and document a continuous, iterative risk-management process across the whole system lifecycle — identifying, evaluating and mitigating risks to health, safety and fundamental rights.
It is not a one-off document but a living process, updated as the system evolves and as post-market monitoring surfaces new risks. It is usually the first thing an auditor asks to see.
Related terms
See how risk management system applies to your systems
Run the free 2-minute EU AI Act checker — no sign-up.