3 hints available

MediumAI SecurityTheoryRed Teaming EU AI Act & Compliance

EU AI Act + NIST AI RMF Compliance for an AI Hiring System

A US-based company is building an AI system that screens job applications — it scores resumes and recommends which candidates to advance to the first interview. The system will be used by employers in Germany, France, and the United States.

(1) Under the EU AI Act, what risk tier does this system fall into and what are the three most significant requirements that apply? Reference Annex III explicitly.

(2) The engineering team is asked to implement "human oversight mechanisms." What does this mean technically — what specifically would you build? Be concrete: UI controls, override flows, audit trails, kill-switches.

(3) Using the NIST AI RMF, describe what the Measure function would require for this system. What tests would you run (bias evaluation, robustness, red-teaming), and what would constitute evidence that risks have been adequately measured? How would you document the results so they are usable both internally and for an EU regulator?

Sign in to attempt this problem

Free account gives you full access to community problems with the complete solution reveal: golden answer, senior walkthrough, and score breakdown, after submission.

Start free →Already have an account? Sign in