IEC e-TECH
article here
The accelerating pace of change brought on by artificial
intelligence (AI) is challenging IEC existing models for building trust. As
will be discussed at the IEC General Meeting(GM) in Hamburg, standards and
conformity assessment (CA) are evolving to adapt to this new landscape.
Standards are often invisible to the people who rely on
them, yet they underpin the confidence that products will work together,
operate safely and perform as expected. But rapid technological change as a
result of digitalization and the widespread use of AI is challenging the
traditional ways in which conformity to standards is assessed.
“Standardization and CA bring tremendous value by providing
trust in new technology,” says Wolfram Zeitz, Executive Secretary of two of the
IEC CA Systems, IECEE (The IEC System of
Conformity Assessment Schemes for Electrotechnical Equipment and Components)
and IECRE (the IEC System for
Certification to Standards Relating to Equipment for Use in Renewable Energy
Applications).
“What has changed is the speed of development. In the past,
product cycles took up to three years before prototypes appeared,” he adds.
“Now change happens far, far quicker and this creates a feeling of uncertainty.
Consumers lose trust when they think development was rushed and conformity is
not being adhered to.”
Henrike Gördes, Head of Governance at DKE,
the organization hosting this year’s GM agrees: “a product that conforms to
relevant standards provides assurance that it will behave in predictable ways
and interact appropriately within a wider technological ecosystem.This ability
to create trust has been one of the foundations of the success of
standardization over many years. But maintaining that trust is becoming more
challenging as technology changes at an accelerating pace.”
The potential undermining of a standards-based order is
particularly acute when software, data or AI can alter a product's behaviour.
The question is no longer simply whether the product was safe when it was
tested. It is also how organizations can ensure that it remains safe and
operates as intended following updates, changes in data or advances in AI,
which are happening faster and faster.
Keeping pace with AI
The problem with attempting to standardize systems and
products in an emerging environment is that the technology may not be mature
enough to stabilize. “Particularly for AI, we don’t yet have industrial
consensus on the technological framework,” says Zeitz. “AI tools are using
different technological setups almost daily. Standardization and conformity
assessment are struggling to keep up with the speed of development.”
Facial recognition, for instance, is increasingly used
across borders, transport, finance and access control, creating a need for
robust standards to ensure security, reliability and responsible use.
International standards including ISO/IEC 27001, ISO/IEC 30107
and ISO/IEC 19795‑10
address information security, biometric performance, anti-spoofing and bias.
IEC and ISO’s work
is evolving to cover AI, deepfakes and remote biometric identification. The
IEC/ISO committee which prepares standards for AI, ISO/IEC SC 42,
develops a wide number of documents helping to establish trust in AI across
different areas, and has for instance published ISO/IEC 5339,
which provides guidance for identifying the context, opportunities and
processes for developing and applying AI applications.
However, there is not yet a comprehensive CA framework to
demonstrate that facial recognition systems meet these standards, as the
technology is still evolving rapidly and standards are still a high-level
framework. “In AI we are currently at a stage comparable to asking for detailed
standards and conformity assessment for airplanes at the time of Lindbergh,”
says Zeitz. “The technology is not yet stable enough to properly design
specifications and detailed criteria.That’s the tricky part. I wouldn’t call it
‘lagging behind,’ but the synchronization between technological development and
standards and conformity assessment is not yet in place.”
Progress is being made. CASCO, the ISO committee for CA, is
working with ISO/IEC SC 42 on ISO/IEC 42007, a draft
standard offering a high-level framework and guidance for the development of CA
schemes for AI systems. Cyber security is one of the challenges
related to AI and in this area the IECEE Industrial Cyber Security Programme, which is based
on the IEC 62443
series of standards, is already well established.
A new pilot CA programme has also recently been initiated
with IEC TC 62, the technical committee which
prepares standards for medical devices, looking at how AI can be
assessed.
All new technologies need to be trusted
While AI is very much the focus of global attention, a host
of new technologies required in our evolving world - notably to meet net zero
targets - also require standards and CA to be used safely and effectively.
Different countries around the world need to trust that manufacturers providing
the tech and products meet the appropriate benchmarks. The difference is that
these technologies are not evolving at the same pace as AI-based systems and
therefore are easier to assess.
For instance, IECEE provides
a testing and certification scheme for electric vehicle (EV) battery systems,
assessing their safety, performance, interoperability, energy efficiency,
electromagnetic compatibility and hazardous substances. It also operates a
specific EV programme, which can test and certify charging systems, stations
and plugs against relevant IEC Standards, including the IEC 62196‑1 and
the IEC 61851
series.
IECEE is also the go-to body to ensure that solar panels and
components are safe and perform according to plan through its National
Certification Bodies and recognized testing laboratories. The system relies on
IEC Standards for module performance, durability and safety. IEC 61215 covers
design qualification and type approval of terrestrial photovoltaic (PV)
modules, while IEC 61730
addresses electrical and mechanical safety through construction and testing
requirements.
IECRE was established a little more than ten years ago to
help provide third party certification and testing services for all power
plants producing, storing, or converting energy from wind, marine and solar PV
energy. The CA system ensures that the essential quality and safety
requirements in standards are met, and as a consequence, that a reliable
performance can be expected from all these systems. For the wind sector, for
example, that means checking that the industry aligns with the IEC 61400
standards, developed by IEC TC 88,
the technical committee which produces standards for wind energy systems.
Conformity assessment is evolving
Traditionally CA has often followed a relatively linear
model: a product is developed, tested and assessed, and then the assessment
provides assurance about that product. Digital and AI-based technologies
complicate this. “Take the introduction of autonomous control in cars, for
example. You could have a software update that basically changes the way the
self-driving vehicle operates,” says Gördes.
This raises an important question for conformity assessment:
what does it mean to demonstrate that a product remains safe and performs as
intended when the product itself can continue to change? “Rather than assessing
a product only at a particular point in its development, assessment needs to
take account of what happens throughout the product's lifecycle,” Gördes says.
DKE advocates a shift from a linear model of CA towards a
more continuous, cyclical approach. “Such an approach could help connect CA
more closely with the reality of digital products, where development,
deployment, updating and monitoring can form an ongoing process rather than a
sequence that ends when a product is first assessed.”
The aim, as outlined in this DKE white
paper, is to develop an approach that better reflects products and
technologies that can change throughout their operational life.
DKE is working with stakeholders from different industries
and in cooperation with DIN and VDE, Germany’s national standards bodies, to
develop the concept. “DKE has a strong interest in ensuring that emerging
thinking can ultimately contribute to international standardization,” Gördes
says.
Independent assessment is essential to ensure trust
The international dimension matters because standards and CA
operate across markets. Manufacturers, regulators and users need confidence
that assurance mechanisms are meaningful not only within individual national
systems but across increasingly global technology ecosystems.
“Our entire framework of requirements is based on
international agreements and consensus,” explains Zeitz. “Every member country,
no matter how big or small, has the same voting rights. The voice of Germany or
the US has the same weight as Kenya. This is embedded in our governance and
this matters because the community and the public need to know that a
requirement - whether technical or procedural - is not just the opinion of one
party. International agreement and consensus building is a strong factor in trust.”
“Only third‑party assessment gives full independence,” Zeitz
insists. “That’s why our CA systems rely on completely impartial laboratories,
certification or inspection bodies. Only such a set-up can give the market full
trust and confidence in the safety, efficiency and interoperability of the
different products.”