Prove – AI agents inside a NIS2 essential entity: what changes, what to prove, and when to go air-gapped

Part 3 of the Sovereign AI series, opening European Cybersecurity Month, for CISOs and security architects. NIS2 is being enforced, CRA reporting obligations apply from 11 September, and the AI Act's post-Omnibus timeline is set. What those regimes actually require of AI systems, the shadow-AI inventory, the controls a platform must supply versus what the entity owns, a live look at agent governance and the audit trail — and the decision table for when air-gapped is the answer.

Speaking:

Ping Cornelia

Ping Xavier

Language: English

Agenda

11:00 - What NIS2, the CRA and the AI Act require of AI systems in an essential entity (Cornelia)

11:12 - Shared responsibility: what the platform supplies, what the entity owns

11:18 - Live: agent governance, DLP guardrails, the audit trail (Xavier)

11:32 - When air-gapped is the answer — the decision table

11:38 - Q&A