Title: Discussion 11 — The Certification Gap
Course: AIINFRA 302: AI Security, Guardrails & Governance > Section: Week 11 — AI Governance Frameworks: NIST AI RMF, ISO/IEC 42001, and the EU AI Act

💬 Discussion 11 — The Certification Gap (20 pts)

Imagine your organization just achieved ISO/IEC 42001 certification for its AI management system. Leadership assumes this means you're "covered" for the EU AI Act too. If your organization deploys a high-risk AI system under the EU AI Act, what gaps would still remain before you could honestly claim EU AI Act compliance? Think about conformity assessment, CE marking, EU database registration, and anything else ISO 42001's certification scope does not touch. Post your initial response (150+ words), then respond to at least two classmates — ideally engaging with a gap they identified that you didn't.