CEN/CENELEC

Annegrit's priority is the Convenorship of CEN CENELEC JTC21 WG 5,  the organisation and project support to work on the AI Act standardisation request for Cybersecurity. This includes a close collaboration with other groups within JTC 21, JTC 13, ISO IEC SC 42 and SC 27 to collect all information of existing and work under development. The main challenge is that JTC 21 and also our WG5 has a diverse structure of experts and knowledge, which makes the work, the effort and efficiency very difficult. In this case, the challenge in addition is the collaboration with other existing standardisation groups within JTC 21 as well as with JTC 13 for Cyber Resilience Act, with ETSI and their view, with ISO IEC SC 27 and SC 42.

ICT Standards funding enables me to attend JTC21 WG1, WG2, WG3 and WG4 meetings and national commission gatherings of NEN (Dutch standardisation body). For me, as a newcomer to the field of standardisation, attending various international and national standardisation-related meetings is insightful. 

Through this fellowship project, I am directly pursuing the development, approval, and publication of the following standards: ISO 22739:2024 ‘Blockchain and Distributed Ledger Technologies – Vocabulary’, ISO/TR 24332  ‘Blockchain and Distributed Ledger Technology in relation to authoritative records, records systems, and records management’ and ISO/NP 24982 ‘Digital currencies – Vocabulary’.

Overall, I am taking a more holistic view of the AI standardisation roadmap while pursuing in parallel my contributions to specific AI standards in SC 42 and JTC 21.

The development of ICT standards for QT is crucial for establishing harmonised approaches and interoperability within the EU, thus ensuring the successful deployment of large-scale quantum networks. 

This fellowship allows me to take part to all meetings concerning Cybersecurity, Privacy and Artificial Intelligence (even most are very early or very late in the day, as per rules for scheduling in SDO's), whilst being able to keep delivering standard based consulting especially for SMEs which need to comply for ISO 27001 certifications mostly. 

Considering the publication of the AI Act, in the next months a challenge will be given to supporting the application of the EU Regulation with a complete vision of existing standards, giving also some orientations to individuate possible new standardisation requests where needed.

This project should therefore have a positive impact on the ability of SMEs to produce and assess quality NLP systems, and should simplify compliance with the AI Act requirements.

With this fellowship, I am addressing the standardisation of AI systems, with particular focus on the standardisation request of the EU Commission in relation to the AI Act. 

The expected impact of the project is to provide stakeholders with a certification as defined in article 42 of the GDPR, thus improving trust between actors in a context of PII processing.

My fellowship focuses on several priorities and key gaps related to AI and cybersecurity standards applied in education.

This technical report, resulting from my fellowship’s contributions, is an equitable analysis of the relationship between Quantum Key Distribution (QKD) and Post-quantum Cryptography (PQC) technologies. It describes the two technologies' complementary nature and highlights their potential advantages and benefits.