# Recital (114)

The providers of general-purpose AI models presenting systemic risks should be subject, in addition to the 
obligations provided for providers of general-purpose AI models, to obligations aimed at identifying and mitigating 
those risks and ensuring an adequate level of cybersecurity protection, regardless of whether it is provided as 
a standalone model or embedded in an AI system or a product. To achieve those objectives, this Regulation should 
require providers to perform the necessary model evaluations, in particular prior to its first placing on the market, 
including conducting and documenting adversarial testing of models, also, as appropriate, through internal or 
independent external testing. In addition, providers of general-purpose AI models with systemic risks should 
continuously assess and mitigate systemic risks, including for example by putting in place risk-management policies, 
such as accountability and governance processes, implementing post-market monitoring, taking appropriate 
measures along the entire model’s lifecycle and cooperating with relevant actors along the AI value chain.

---
Source: Regulation (EU) 2024/1689 (Artificial Intelligence Act) as amended by Regulation (EU) 2026/1744, consolidated text of 27 July 2026 (Official Journal of the EU). This page is AI-generated legal information, not legal advice. Verify against the Official Journal.
Canonical: https://euaiactlaw.com/recital/114