Standard

The work item will be a domain-specific focus application of the EN 304 223 principle for base cybersecurity requirements for AI models and systems to Generative AI. The TS will focus on the subject of deepfakes, which includes the issues of misinformation, disinformation, loss of confidentiality, copyright, IPR and the training/source material for LLMs. Also, this TS will include more prescriptive specifications for this domain extension to EN 304 223 when necessary.  

The document provides requirements for implementing Human-to-Human Online Preventative Security (H2H-OPS), which complements ETSI TR 104 137 [i.1] 'Human-to-Human Online Preventative Security'. The principles included in the present document are secure by design, safety by design, and privacy by design. These are supported by annexes covering balancing the different requirements for Human-to-Human Online Preventative Security, demography, education and digital literacy. H2H-OPS is targeted at the operators, designers and service provides that have products, services and applications that allow users to post content online or to interact with each other. For example, social media networks, consumer file cloud storage and sharing sites, video-sharing platforms, online forums, dating services, video games with player-toplayer messaging, and online instant messaging services.

This document describes a taxonomy of the AI tasks related to computer vision. It includes AI tasks pertaining to either the analysis or generation of images and videos.

The scope of JPEG XE is the creation of a standard for the representation of Events in an efficient way allowing interoperability between sensing, storage, and processing, targeting machine vision and other relevant applications. An Event is the message that signals the result of an observation at a precise point in time. It is typically triggered by a detected change in the physical world. Examples are contrast detection (CD) events from an event-based vision sensor or inertial measurement unit (IMU) readings.

This document establishes general principles for and methods of processing personal identifiable information (PII) in BC/DLT systems and provides requirements and recommendations derived from legal requirements and recommendations in the GDPR. The document clarifies relevant terms for both technical as well as legal experts. It establishes a methodological framework that helps identifying types of PII as well as mapping legal principles of the GDPR to technical measures available to improve data protection or mitigate the risk of processing PII in BC/DLT-systems. This document is aimed towards establishing a high level of privacy in BC/DLT-systems. This document is applicable to all BC/DLT-systems.

The pace of innovation in AI methods, architectures and tools remains exceptionally high, driven by progress in data availability, computational capacity and algorithmic development. As a result, the professional landscape surrounding AI is in constant evolution: new roles, specialisations and skill requirements emerge, while others evolve, merge or decline in relative importance. 

This CEN Workshop Agreement (CWA) is intended to function as a living reference point: a common baseline that can support dialogue, alignment and comparability, while remaining open to revision as the AI field continues to mature and transform. Readers and users of this document are encouraged to interpret and apply it with this dynamic context in mind, recognising both its value as a shared framework and its limitations in a field defined by rapid and ongoing change. 

This CWA is partially based on the results of the Artificial Intelligence Skills Alliance (ARISA) project, funded under the Erasmus+ programme ‘Partnerships for Innovation; Alliances for Sectoral Cooperation on Skills’ of the European Commission.

This standard specifies a reference architecture for the execution of Local Digital Twins (LDTs) in European cities and communities. The architecture defines the essential components, interfaces, and data flows required to enable interoperable, AI-enabled digital twin solutions, supporting real-time integration of heterogeneous data sources, advanced analytics, and simulation capabilities.

The standard covers the logical and technical layers necessary for the deployment, operation, and federation of digital twins, including context management (e.g. using NGSI-LD), data models (e.g. using SAREF), AI/ML integration (with ethical considerations aligned to the EU AI Act), secure data exchange, and IoT device integration (e.g. via oneM2M standards). It ensures alignment with ongoing European initiatives such as CitiVerse EDIC, and Minimal Interoperability Mechanisms (MIMs/ITU-T Y.4505), while supporting compliance with relevant EU regulations and standards including the Interoperable Europe Act.

The architecture is designed to be extensible, supporting cross-domain use cases (such as mobility, energy and urban planning) and future technological advancements, exploring on-going standards developments for digital twins (e.g. in ISO/IEC, ITU-T, CEN/CENELEC). Implementation guidance will be provided to facilitate adoption by cities and ensure vendor-neutral solutions. 

This document describes common capabilities, requirements and a supporting information model for logging of events in AI systems. This document is designed to be used with a risk management system.

This document specifies:

• logical data structures for a Biometric System-on-Card (BSoC);
• enrolment procedures; and
• usage of commands and data structures defined in other International Standards for BSoC.

This document does not define requirements for:

• commands and data structures that apply to devices external to a BSoC;
• commands and data structures that apply to logical interfaces inside a BSoC.

Recommendation ITU-T X.506 | ISO/IEC 9594-13 establishes the background for the necessity for establishing crypto agility in the light of coming quantum computers but also when currently used cryptographic algorithms are considered unsafe. It does not alone describe WHY migration is required but also specifies in detail HOW migration is performed. It defines principles for how public-key certificates, attribute certificates and communication protocols can be prepared for migration and it provides tools for how migration can be established. The considerations on migration of public-key certificates are consistent with the approach specified in Rec. ITU-T X.509 | ISO/IEC 9594-8. The approach taken for migration of communication protocols is consistent with the one taken for public-key certificates to allow for a consistent migration strategy. Recommendation ITU-T X.506 | ISO/IEC 9594-13 is technically aligned with IEC TR 62351-90-4 for the electrical power industry.

This document defines a process for reviewing and analyzing smart contract code. It specifies supporting methods to allow identification and mitigation of smart contract security vulnerabilities.