AI meets Cybersecurity
#2 Governing AI Risk: Architecture, Compliance, Simplification
📅 February 26, 2026
🕐 6:30 PM
📍 Viale la Plaia, 15
The talk addresses the problem of AI risk management as an integrated technical-legal process, showing how the governance of artificial intelligence systems cannot be reduced to a mere formal fulfillment.
The first part is dedicated to technical risk management tools in production AI systems: continuous model monitoring, logging, auditability, human oversight, and operational drift management. Particular attention is given to generative systems and general-purpose models, in which transparency and explainability present structural limits that directly impact the possibility of control and verification.
The second part analyzes the multi-risk approach of the AI Act as a regulatory translation of typical risk engineering principles. It examines obligations for high-risk systems, the distribution of responsibilities along the supply chain (provider, deployer, integrator), and the relationship between technical security and legal compliance.
In closing, the talk examines the Digital Omnibus package, evaluating the extent to which simplification and proportionality measures affect the framework of the AI Act and the balance between reducing burdens and effective risk protection. The central message is that effective compliance does not eliminate AI risk, but makes it manageable through consistent architectural, organizational, and regulatory choices.
Speakers
Massimo Simbula, Esq.
Lawyer specializing in innovation law, fintech, crypto, AI, and privacy. Founder of Studio Legale Simbula, he assists over 400 clients including startups, VC funds, and institutions on MiCAR, the AI Act, GDPR, and blockchain. DPO for several organizations.
Davide Carboni, Eng.
Italian technologist and entrepreneur with expertise in computer science, engineering, cybersecurity, and blockchain. He has managed over 100 IT projects. Adjunct Professor of Emerging Technologies at Luiss University. Interests: AI, cybersecurity, and decentralized finance.