IT Consultancy/Development

Identifying standardisation gaps and creating road maps is essential for ensuring technology development addresses key problem areas.  

In the transversal aspects in data spaces, there is a lack of guidance on the integration of security and privacy, and it is crucial to develop this further as it is a barrier for compliance with regulation (e.g. CRA, AI act). 

This fellowship allows me to take part to all meetings concerning Cybersecurity, Privacy and Artificial Intelligence (even most are very early or very late in the day, as per rules for scheduling in SDO's), whilst being able to keep delivering standard based consulting especially for SMEs which need to comply for ISO 27001 certifications mostly. 

With this fellowship, the aim is to create and continue working on a Technical standard proposal, and I decided to push such action to Joint Working Group 4 which is directly in liaison with ISO/SC27 in charge of the security of IT systems. 

The targeted ICT standards development activity aims to address the dynamic changes in the European Union's financial services landscape, driven by the Payment Services Directive (PSD3), Payment Services Regulation (PSR), and financial data access (FIDA). The objective is to adapt and enhance existing standards to align with the regulatory updates introduced by PSD3, PSR, and FIDA.

This work is addressing the demand of harmonised standards for radio regulations certification. In particular it is addressing RFID in the UHF frequency bands 865-868 and 915-921 MHz. 

The objective of this fellowship is to include European contributions on viable methodologies on semantic interoperability in ISO standards: ISO SC41 IoT and Digital Twin, with a focus on practical use cases in the domains of health/well-being.

Standardisation work continues with the integration of new technologies, new insights, and new requirements of different verticals. It is very important that EU science, industry, and also users are well represented and engaged in this process. 

Considering the publication of the AI Act, in the next months a challenge will be given to supporting the application of the EU Regulation with a complete vision of existing standards, giving also some orientations to individuate possible new standardisation requests where needed.

This project should therefore have a positive impact on the ability of SMEs to produce and assess quality NLP systems, and should simplify compliance with the AI Act requirements.

My fellowship contributes to the standardisation on trustworthiness and security of AI generative pre-trained models to establish a robust framework that addresses the escalating concerns surrounding the security risks and privacy implications associated with the development, deployment, and utilisation of these advanced AI models. IEEE P7018, CEN CENELEC

The expected impact of the project is to provide stakeholders with a certification as defined in article 42 of the GDPR, thus improving trust between actors in a context of PII processing.