Agent teams can prepare useful controls while European AI standards progress. Begin with the intended use, the actions the system can take, the risks those actions introduce, and the evidence required to evaluate the controls. Keep the legal status of each standard separate from that engineering work.
The September 2026 status needs a dated source
The JTC 21 catalogue, with entries updated 4 September and checked 7 September 2026, lists EN 18286:2026 as published and prEN 18228, prEN 18282 and prEN 18229-1 at Approval stage. Its Official Journal field is false for all four. The Commission portal reports assessment of EN 18286 as ongoing.
The earlier 9 July JTC 21 update described enquiries ending on 30 July for risk management and cybersecurity, and 20 August for logging. Those consultation deadlines have passed; the newer catalogue supplies the stage used here.
What publication means for a conformity claim
The Commission’s standardisation explanation distinguishes publication by CEN and CENELEC, Commission assessment and reference in the Official Journal of the EU. Application is voluntary. Presumption of conformity depends on the cited standard, the requirements it covers and the system’s conformity with the relevant provisions. EN publication alone establishes no such presumption.
Keep the dated edition, applicable clauses, any limitations in the citation, assessment results and responsible sign-off together. A product control map supplies only part of that record. Do not describe a category-level mapping as certification or as a completed conformity assessment.
Three engineering workstreams to start now
The following are KLA preparation recommendations, based on the subject areas of the drafts. They make no assertion about individual draft clauses.
| Workstream | Concrete work product | Review question |
|---|---|---|
| Risk management: prEN 18228 | Action inventory, hazard analysis, control owner and residual-risk decision | What happens if the agent acts on the wrong case or exceeds its authority? |
| Cybersecurity: prEN 18282 | Threat model and tests at identity, tool, data and network boundaries | Can hostile retrieved content cause an unauthorized action? |
| Logging: prEN 18229-1 | Decision-to-execution record design and reconstruction exercise | Can an investigator link the request, rule, reviewer and external effect? |
Use one workflow to test the whole chain
Take an illustrative AML agent that proposes closing an alert. The compliance owner defines which alerts may be closed automatically and which require review. The platform team binds requests to an agent and tenant, enforces permitted data and actions, and records the policy decision before the case system changes.
Test a normal permitted closure, a restricted case, a human rejection, an expired approval and a retried request. Reconcile each decision with the case system’s actual state. Retain failures and discrepancies as findings with named owners. These are proposed acceptance scenarios, not a claim that KLA or a customer deployment has passed them.
Connect operating evidence to quality management
EN 18286 concerns quality management for EU AI Act regulatory purposes. In a preparation exercise, place your technical controls inside an accountable change process: who approves a policy release, who checks it, what causes revalidation, and who accepts remaining risk. The system provider and deployer must establish their applicable responsibilities.
Version the mapping and keep a change log when drafts or published references change. Reassess the affected controls rather than silently relabelling an old export with a new standard number.
A useful next deliverable
Build a register with one row per control: intended use, risk, owner, enforcement boundary, failure test, evidence location, relevant standard topic and outstanding assessment. Our agent control mapping guide provides a starting matrix.
KLA Control Plane can contribute records from configured policy, approval and execution paths. The institution must also supply system documentation, organizational processes, assessment evidence and controls outside those paths.
Frequently Asked Questions
Does EN 18286 publication prove AI Act compliance?
Publication alone gives no presumption of conformity. Review the Official Journal citation, covered requirements and evidence of conformity, alongside the obligations applicable to the system.
Are prEN 18228, prEN 18282 and prEN 18229-1 final standards?
The JTC 21 catalogue entries updated 4 September 2026 list them at Approval stage. They remain draft references in this mapping; verify the current edition and status before using them in an assessment.