Assess whether the system is high-risk under the EU AI Act from vendor model

Situation

The desk packet is vendor model card with missing evaluation slices after a vendor SOC report that excludes the actual model host region. HR analytics governance lead in a city using a hiring-screen algorithm has to name Policy or governance breach or Model defect for this AI Governance Inventory and Regulatory Fit file.

Decision

HR analytics governance lead in a city using a hiring-screen algorithm must choose Policy or governance breach / Model defect / Dual failure / Hold for the missing fact using vendor model card with missing evaluation slices after a vendor SOC report that excludes the actual model host region.

Hypotheses to test

• Authorize Policy or governance breach now; vendor model card with missing evaluation slices already has the discriminator after a vendor SOC report that excludes the actual model host region.
• Keep Model defect in force until vendor model card with missing evaluation slices is completed after a vendor SOC report that excludes the actual model host region for HR analytics governance lead.
• Treat vendor model card with missing evaluation slices as Dual failure because both readings appear after a vendor SOC report that excludes the actual model host region.
• Refuse a AI Governance close: HR analytics governance lead does not have the page the system is high-risk turns on in vendor model card with missing evaluation slices.

Analysis required

• Walk the model input/output path recorded in vendor model card with missing evaluation slices and mark each hop approved, shadow, or unlogged.
• Verify data provenance and the human-oversight gate HR analytics governance lead can actually point to.
• Walk the model input/output path recorded in vendor model card with missing evaluation slices and mark each hop approved, shadow, or unlogged.
• For this AI Governance Inventory and Regulatory Fit file, read vendor model card with missing evaluation slices against a vendor SOC report that excludes the actual model host region and write the one fact that would move the system is high-risk for HR analytics governance lead.

Recommendation

Choose Policy or governance breach / Model defect / Dual failure / Hold for the missing fact on this AI Governance / Inventory and Regulatory Fit packet (vendor model card with missing evaluation slices after a vendor SOC report that excludes the actual model host region). The follow-on Inventory and Regulatory Fit action is what HR analytics governance lead does next: implement the option, assign an owner, and log the missing fact.