{"id":26660,"date":"2026-06-09T09:05:08","date_gmt":"2026-06-09T08:05:08","guid":{"rendered":"https:\/\/neocoeurintelligence.com\/?p=26660"},"modified":"2026-06-12T11:09:12","modified_gmt":"2026-06-12T10:09:12","slug":"ai-act-the-5-steps-to-map-your-sensitive-ai-flows","status":"publish","type":"post","link":"https:\/\/neocoeurintelligence.com\/fr\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\/","title":{"rendered":"Loi sur l'IA : Les 5 \u00e9tapes pour cartographier vos flux d'IA sensibles"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"26660\" class=\"elementor elementor-26660\">\n\t\t\t\t<div class=\"elementor-element elementor-element-91f8c00 e-con-full e-flex sc_layouts_column_icons_position_left e-con e-parent\" data-id=\"91f8c00\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c70383f sc_fly_static elementor-widget elementor-widget-html\" data-id=\"c70383f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<style>\n.aiact-art{color:#1A1A1A;font-family:'Tinos','Liberation Serif',Georgia,serif;line-height:1.7}\n.aiact-art *{box-sizing:border-box}\n.aiact-wrap{max-width:760px;margin:0 auto;padding:0 24px}\n.aiact-toc{background:#0F2540;color:#E8EEF3;border:1px solid #1F4863;border-radius:14px;padding:32px 36px;margin:24px auto 48px;max-width:720px;position:relative;overflow:hidden;font-family:'Source Sans Pro',Arial,sans-serif}\n.aiact-toc:after{content:\"\";position:absolute;top:-30px;right:-30px;width:120px;height:120px;background:radial-gradient(circle,#22D3EE 0%,#1F7A8C 60%,transparent 80%);opacity:.6;border-radius:50%}\n.aiact-toc h3{color:#22D3EE;font-size:13px;letter-spacing:2px;margin:0 0 24px;font-weight:700;position:relative}\n.aiact-toc-item{display:flex;align-items:center;border-bottom:1px solid #1F4863;padding:10px 0;font-size:14px;color:#D5E1EC}\n.aiact-toc-item.indent{padding-left:42px;font-size:13px;color:#A8BCCD}\n.aiact-toc-num{font-family:'Courier New',monospace;font-size:11px;color:#22D3EE;width:36px;flex-shrink:0;letter-spacing:1px}\n.aiact-meta{font-family:'Source Sans Pro',Arial,sans-serif;font-size:11px;color:#7B98B0;letter-spacing:.5px;text-align:center;margin:24px 0;padding:12px 0;border-top:1px solid #DDE5EB;border-bottom:1px solid #DDE5EB}\n.aiact-meta strong{color:#1F7A8C;font-weight:700}\n.aiact-section{padding:32px 0 64px;font-family:'Tinos',Georgia,serif}\n.aiact-section .aiact-wrap{font-size:16px;line-height:1.8;text-align:justify}\n.aiact-section h1{font-family:'Source Sans Pro',Arial,sans-serif;font-size:30px;color:#0A1A2F;margin:48px 0 16px;font-weight:700;letter-spacing:-.5px}\n.aiact-section h2{font-family:'Source Sans Pro',Arial,sans-serif;font-size:22px;color:#1F7A8C;margin:40px 0 16px;font-weight:700}\n.aiact-section h3{font-family:'Source Sans Pro',Arial,sans-serif;font-size:16px;color:#1F7A8C;margin:28px 0 12px;font-weight:700;letter-spacing:.3px}\n.aiact-section p{margin:0 0 16px}\n.aiact-divider{height:2px;background:#22D3EE;width:120px;margin:0 0 32px}\n.aiact-update{background:#0F2540;color:#E8EEF3;border-left:4px solid #22D3EE;padding:24px 28px;margin:32px 0;border-radius:0 8px 8px 0;font-family:'Source Sans Pro',Arial,sans-serif}\n.aiact-update h4{margin:0 0 10px;font-size:12px;letter-spacing:2px;color:#22D3EE;font-weight:700}\n.aiact-update p{font-size:14px;line-height:1.7;margin:0;color:#D5E1EC}\n.fig{background:#0F2540;color:#E8EEF3;border-radius:14px;margin:40px 0;padding:24px;font-family:'Source Sans Pro',Arial,sans-serif;overflow:hidden}\n.fig-head{display:flex;justify-content:space-between;align-items:center;font-family:'Courier New',monospace;font-size:10px;color:#7B98B0;letter-spacing:1.5px;margin-bottom:24px;padding-bottom:16px;border-bottom:1px solid #1F4863}\n.fig-head .dots{display:inline-block;margin-right:10px;color:#FF6B6B}\n.fig-head .dots span:nth-child(2){color:#FFD93D}\n.fig-head .dots span:nth-child(3){color:#6BCB77}\n.fig-tag{background:#1F4863;padding:4px 10px;border-radius:4px;color:#22D3EE;font-size:9px}\n.fig-foot{font-family:'Courier New',monospace;font-size:9px;color:#5A7188;letter-spacing:1px;text-align:center;margin-top:20px;padding-top:16px;border-top:1px solid #1F4863;text-transform:uppercase}\n.pyramid{display:flex;flex-direction:column;align-items:center;gap:8px;padding:16px 0}\n.pyr-tier{padding:14px 24px;border-radius:8px;color:#fff;text-align:center;display:flex;align-items:center;justify-content:space-between;gap:24px;min-height:60px;position:relative}\n.pyr-tier .label{font-weight:700;font-size:15px}\n.pyr-tier .article{font-size:11px;opacity:.85;display:block;margin-top:2px}\n.pyr-tier .ex{font-size:11px;color:rgba(255,255,255,.9);font-style:italic}\n.pyr-tier.t1{background:#E74C3C;width:300px}\n.pyr-tier.t2{background:#E67E22;width:420px}\n.pyr-tier.t3{background:#F1C40F;width:540px;color:#3D2F00}\n.pyr-tier.t4{background:#0EA5E9;width:660px}\n.sanctions{display:grid;grid-template-columns:1fr 1fr 1fr;gap:16px}\n.sanc{background:linear-gradient(180deg,rgba(255,107,107,.15),rgba(255,107,107,.05));border:1px solid rgba(255,107,107,.3);border-radius:10px;padding:24px 18px;text-align:center}\n.sanc.s2{background:linear-gradient(180deg,rgba(230,126,34,.15),rgba(230,126,34,.05));border-color:rgba(230,126,34,.3)}\n.sanc.s3{background:linear-gradient(180deg,rgba(14,165,233,.15),rgba(14,165,233,.05));border-color:rgba(14,165,233,.3)}\n.sanc-lbl{font-family:'Courier New',monospace;font-size:9px;letter-spacing:1.5px;color:#7B98B0;margin-bottom:12px}\n.sanc-val{font-size:36px;font-weight:700;color:#FF6B6B;line-height:1}\n.sanc.s2 .sanc-val{color:#FFA94D}\n.sanc.s3 .sanc-val{color:#22D3EE}\n.sanc-pct{font-size:12px;color:#A8BCCD;margin:6px 0 14px}\n.sanc-desc{font-size:11px;color:#D5E1EC;line-height:1.5}\n.timeline{position:relative;padding-left:80px}\n.timeline:before{content:\"\";position:absolute;left:35px;top:8px;bottom:8px;width:2px;background:#1F4863}\n.tl-item{position:relative;margin-bottom:24px;padding-bottom:16px}\n.tl-dot{position:absolute;left:-58px;top:2px;width:24px;height:24px;border-radius:50%;border:3px solid #22D3EE;background:#0F2540}\n.tl-dot.urgent{border-color:#FF6B6B}\n.tl-date{position:absolute;left:-180px;top:4px;font-family:'Courier New',monospace;font-size:10px;color:#7B98B0;letter-spacing:1px;width:110px;text-align:right}\n.tl-title{font-size:14px;font-weight:700;color:#E8EEF3;margin-bottom:4px}\n.tl-pill{display:inline-block;font-size:9px;background:#1F4863;color:#22D3EE;padding:2px 8px;border-radius:4px;font-family:'Courier New',monospace;letter-spacing:1px;margin-left:8px}\n.tl-pill.urgent{background:rgba(255,107,107,.2);color:#FF6B6B}\n.tl-desc{font-size:12px;color:#A8BCCD;line-height:1.6}\n.annexes{display:grid;grid-template-columns:1fr;gap:12px}\n.annex{background:#0A1A2F;border:1px solid #1F4863;border-radius:10px;padding:18px;text-align:center}\n.annex-num{font-family:'Courier New',monospace;font-size:22px;color:#22D3EE;font-weight:700;letter-spacing:2px;margin-bottom:8px}\n.annex-icon{font-size:18px;color:#7B98B0;margin-bottom:6px}\n.annex-title{font-size:14px;font-weight:700;color:#E8EEF3;margin-bottom:4px}\n.annex-tags{font-family:'Courier New',monospace;font-size:10px;color:#7B98B0;letter-spacing:1px}\n.warning-box{background:rgba(231,76,60,.08);border-left:4px solid #E74C3C;padding:20px 24px;border-radius:0 6px 6px 0;margin:32px 0;font-family:'Source Sans Pro',Arial,sans-serif}\n.warning-box h4{margin:0 0 10px;color:#C0392B;font-size:13px;letter-spacing:1px;font-weight:700}\n.warning-box p{margin:0;font-size:14px;color:#5A2D26;line-height:1.7}\n.case{padding:20px 24px;border-radius:8px;margin:20px 0;font-family:'Source Sans Pro',Arial,sans-serif;border-left:4px solid}\n.case h4{margin:0 0 10px;font-size:13px;letter-spacing:.5px;font-weight:700}\n.case p{margin:0;font-size:13.5px;line-height:1.7}\n.case.c1{background:#FFF4E6;border-left-color:#E67E22}\n.case.c1 h4{color:#9C5520}\n.case.c1 p{color:#5A3315}\n.case.c2{background:#FFFBE6;border-left-color:#F1C40F}\n.case.c2 h4{color:#8A6D08}\n.case.c2 p{color:#4A3D08}\n.case.c3{background:#E8F8EF;border-left-color:#27AE60}\n.case.c3 h4{color:#1A6B3D}\n.case.c3 p{color:#1A3D26}\n.process5{display:grid;grid-template-columns:repeat(5,1fr);gap:8px;align-items:start;margin:8px 0}\n.step-circle{width:54px;height:54px;border-radius:50%;color:#fff;display:flex;align-items:center;justify-content:center;font-size:24px;font-weight:700;margin:0 auto 10px}\n.proc-step{text-align:center}\n.proc-step .name{font-size:12px;font-weight:700;color:#E8EEF3;margin-bottom:4px}\n.proc-step .desc{font-size:10px;color:#A8BCCD;line-height:1.4}\n.proc-arrow{align-self:center;color:#7B98B0;font-size:20px;text-align:center}\n.s1{background:#E74C3C}.s2{background:#E67E22}.s3{background:#3498DB}.s4{background:#5B6EE1}.s5{background:#27AE60}\n.step-card{display:flex;align-items:stretch;background:#fff;border:1px solid #DDE5EB;border-radius:10px;overflow:hidden;margin:24px 0 20px}\n.step-card .step-num-box{width:84px;display:flex;flex-direction:column;align-items:center;justify-content:center;color:#fff;font-family:'Source Sans Pro',Arial,sans-serif;flex-shrink:0}\n.step-card .step-num-box .n{font-size:38px;font-weight:700;line-height:1}\n.step-card .step-num-box .l{font-size:9px;letter-spacing:2px;margin-top:4px}\n.step-card.sc1 .step-num-box{background:#E74C3C}\n.step-card.sc2 .step-num-box{background:#E67E22}\n.step-card.sc3 .step-num-box{background:#3498DB}\n.step-card.sc4 .step-num-box{background:#5B6EE1}\n.step-card.sc5 .step-num-box{background:#27AE60}\n.step-card .step-body{padding:18px 22px;font-family:'Source Sans Pro',Arial,sans-serif}\n.step-card .step-body h4{margin:0 0 8px;font-size:15px;color:#0A1A2F;font-weight:700}\n.step-card .step-body p{margin:0;font-size:13px;color:#4A5965;line-height:1.6}\nol.aiact-ol,ul.aiact-ul{margin:0 0 20px 0;padding-left:24px;font-family:'Source Sans Pro',Arial,sans-serif;font-size:14px;line-height:1.8}\nol.aiact-ol li,ul.aiact-ul li{margin-bottom:8px}\nul.aiact-ul.arrow{list-style:none;padding-left:0}\nul.aiact-ul.arrow li{padding-left:20px;position:relative}\nul.aiact-ul.arrow li:before{content:\"\\25B8\";position:absolute;left:0;color:#1F7A8C}\n.articles-list{display:grid;gap:14px;margin:8px 0}\n.art-row{padding:14px 0}\n.art-num{font-family:'Courier New',monospace;font-size:10px;color:#22D3EE;letter-spacing:1.5px;margin-bottom:4px}\n.art-name{font-size:14px;font-weight:700;color:#E8EEF3;margin-bottom:4px}\n.art-desc{font-size:12px;color:#A8BCCD;line-height:1.6}\n.art-bar{height:2px;background:linear-gradient(90deg,var(--c1),var(--c2));margin-top:10px}\n.checklist-box{background:#FAF8F4;border:1px solid #DDE5EB;border-radius:10px;padding:24px;font-family:'Source Sans Pro',Arial,sans-serif;margin:24px 0}\n.checklist-box h3{font-size:14px;color:#1F7A8C;margin:0 0 12px;letter-spacing:.5px}\n.checklist-box ul{list-style:none;padding-left:0;margin:0}\n.checklist-box li{padding:6px 0 6px 28px;position:relative;font-size:13.5px;color:#1A1A1A}\n.checklist-box li:before{content:\"\\2610\";position:absolute;left:0;color:#1F7A8C;font-weight:700;font-size:16px}\n.cta-box{background:linear-gradient(135deg,#0A1A2F,#0F2540);color:#fff;padding:40px;border-radius:14px;text-align:center;margin:40px 0;font-family:'Source Sans Pro',Arial,sans-serif}\n.cta-box h3{margin:0 0 12px;color:#22D3EE;font-size:22px}\n.cta-box p{margin:8px 0;color:#D5E1EC;font-size:14px}\n.cta-btn{display:inline-block;background:#22D3EE;color:#0A1A2F!important;padding:14px 30px;border-radius:8px;font-weight:700;text-decoration:none;margin-top:16px;font-size:14px;letter-spacing:.5px}\n.refs{font-family:'Source Sans Pro',Arial,sans-serif;font-size:12.5px;line-height:1.7;color:#3D4D5C}\n.refs p{margin:0 0 12px}\n.refs a{color:#1F7A8C}\n@media(max-width:720px){\n.pyr-tier{width:90%!important;font-size:13px}\n.sanctions{grid-template-columns:1fr}\n.process5{grid-template-columns:1fr}\n.proc-arrow{display:none}\n.timeline{padding-left:40px}\n.tl-date{position:static;display:block;margin-bottom:6px;text-align:left;width:auto}\n}\n<\/style>\n\n<div class=\"aiact-art\">\n\n<div class=\"aiact-wrap\">\n<div class=\"aiact-meta\"><strong>ART-03<\/strong> \u00b7 Neo Coeur Intelligence \u00b7 Publi\u00e9 : mai 2026 \u00b7 Mis \u00e0 jour : Lignes directrices CE 19 mai 2026<\/div>\n<\/div>\n\n<div class=\"aiact-toc\">\n<h3>\ud83d\udccb TABLE DES MATI\u00c8RES<\/h3>\n<div class=\"aiact-toc-item\"><span class=\"aiact-toc-num\">00.<\/span>Introduction<\/div>\n<div class=\"aiact-toc-item\"><span class=\"aiact-toc-num\">I.<\/span>Vue d'ensemble, le r\u00e8glement sur l'IA et ses enjeux<\/div>\n<div class=\"aiact-toc-item indent\"><span class=\"aiact-toc-num\">1.1<\/span>D\u00e9finition et fondements r\u00e9glementaires<\/div>\n<div class=\"aiact-toc-item indent\"><span class=\"aiact-toc-num\">1.2<\/span>Importance et enjeux<\/div>\n<div class=\"aiact-toc-item\"><span class=\"aiact-toc-num\">II.<\/span>Analyse d\u00e9taill\u00e9e, classification et port\u00e9e<\/div>\n<div class=\"aiact-toc-item indent\"><span class=\"aiact-toc-num\">2.1<\/span>Situation actuelle et calendrier r\u00e9glementaire<\/div>\n<div class=\"aiact-toc-item indent\"><span class=\"aiact-toc-num\">2.2<\/span>Probl\u00e8mes rencontr\u00e9s<\/div>\n<div class=\"aiact-toc-item indent\"><span class=\"aiact-toc-num\">2.3<\/span>Cas concrets et exemples sectoriels<\/div>\n<div class=\"aiact-toc-item\"><span class=\"aiact-toc-num\">III.<\/span>Solutions, les 5 \u00e9tapes de cartographie<\/div>\n<div class=\"aiact-toc-item indent\"><span class=\"aiact-toc-num\">3.1<\/span>\u00c9tape 1, Constitution de l'\u00e9quipe et d\u00e9finition du p\u00e9rim\u00e8tre<\/div>\n<div class=\"aiact-toc-item indent\"><span class=\"aiact-toc-num\">3.2<\/span>\u00c9tape 2, mener l'inventaire exhaustif<\/div>\n<div class=\"aiact-toc-item indent\"><span class=\"aiact-toc-num\">3.3<\/span>\u00c9tape 3, Classer selon la grille de risques de l'IA<\/div>\n<div class=\"aiact-toc-item indent\"><span class=\"aiact-toc-num\">3.4<\/span>\u00c9tape 4, \u00e9valuer l'exposition et prioriser<\/div>\n<div class=\"aiact-toc-item indent\"><span class=\"aiact-toc-num\">3.5<\/span>\u00c9tape 5, Documenter et maintenir dans le temps<\/div>\n<div class=\"aiact-toc-item indent\"><span class=\"aiact-toc-num\">3.6<\/span>Liste de contr\u00f4le pour la cartographie de l'AI Act<\/div>\n<div class=\"aiact-toc-item\"><span class=\"aiact-toc-num\">IV.<\/span>Conclusion<\/div>\n<div class=\"aiact-toc-item\"><span class=\"aiact-toc-num\">V.<\/span>R\u00e9f\u00e9rences bibliographiques<\/div>\n<\/div>\n\n<div class=\"aiact-section\">\n<div class=\"aiact-wrap\">\n\n<h1>Introduction<\/h1>\n<div class=\"aiact-divider\"><\/div>\n\n<p>Dans un contexte o\u00f9 les syst\u00e8mes d'intelligence artificielle s'int\u00e8grent massivement dans les processus d\u00e9cisionnels des organismes publics et priv\u00e9s, la question de leur conformit\u00e9 r\u00e9glementaire est devenue un enjeu strat\u00e9gique de premier ordre. L'entr\u00e9e en vigueur du r\u00e8glement (UE) 2024\/1689, dit \u00ab\u00a0AI Act\u00a0\u00bb, le 1er ao\u00fbt 2024 marque ainsi le tournant r\u00e9glementaire le plus structurant de la d\u00e9cennie pour toute organisation qui d\u00e9ploie des syst\u00e8mes d'IA en Europe.<\/p>\n\n<p>La question centrale que cet article aborde est la suivante : comment une organisation peut-elle, de mani\u00e8re rigoureuse et d\u00e9fendable, identifier les syst\u00e8mes d'IA qu'elle d\u00e9ploie, \u00e9valuer leur niveau de risque au regard du R\u00e8glement, et prioriser ses actions de conformit\u00e9 avant la date limite critique du 2 ao\u00fbt 2026 ?<\/p>\n\n<p>L'objectif de cet article est de proposer une m\u00e9thodologie structur\u00e9e en cinq \u00e9tapes pour r\u00e9aliser cette cartographie, de l'inventaire initial des syst\u00e8mes \u00e0 la mise en place d'une gouvernance continue. Chaque \u00e9tape s'appuie sur les dispositions sp\u00e9cifiques du texte officiel du r\u00e8glement (UE) 2024\/1689, enrichies par les lignes directrices publi\u00e9es par la Commission europ\u00e9enne le 19 mai 2026.<\/p>\n\n<div class=\"aiact-update\">\n<h4>\u26a1 MISE \u00c0 JOUR R\u00c9GLEMENTAIRE, 19 MAI 2026<\/h4>\n<p>La Commission europ\u00e9enne a publi\u00e9 ses directives tr\u00e8s attendues sur la classification des syst\u00e8mes d'IA \u00e0 haut risque en vertu de l'article 6 du r\u00e8glement (UE) 2024\/1689. Ouvertes \u00e0 la consultation publique jusqu'au 23 juin 2026, ces directives pr\u00e9cisent que la qualification de haut risque d\u00e9pend du cas d'utilisation concret et pas uniquement de l'appartenance \u00e0 une cat\u00e9gorie de l'Annexe III, renfor\u00e7ant ainsi l'urgence d'une cartographie document\u00e9e et m\u00e9thodique.<\/p>\n<\/div>\n\n<h1 style=\"margin-top:64px\">I. Vue d'ensemble : Le r\u00e8glement sur l'IA et ses enjeux<\/h1>\n<div class=\"aiact-divider\"><\/div>\n\n<h2>1. D\u00e9finition et fondements r\u00e9glementaires<\/h2>\n<p>Le r\u00e8glement (UE) 2024\/1689 du Parlement europ\u00e9en et du Conseil du 13 juin 2024 constitue le premier cadre juridique mondial complet d\u00e9di\u00e9 \u00e0 la r\u00e9glementation des syst\u00e8mes d'intelligence artificielle. Publi\u00e9 au Journal officiel de l'Union europ\u00e9enne le 12 juillet 2024, il \u00e9tablit des r\u00e8gles harmonis\u00e9es applicables dans tous les \u00c9tats membres, cr\u00e9ant ainsi un cadre unifi\u00e9 pour le d\u00e9veloppement, la mise sur le march\u00e9 et l'utilisation des syst\u00e8mes d'IA.<\/p>\n\n<p>Le R\u00e8glement adopte une <strong>approche fond\u00e9e sur les risques<\/strong> qui distingue quatre niveaux de risque (inacceptable, \u00e9lev\u00e9, limit\u00e9 et minimal) d\u00e9terminant le r\u00e9gime r\u00e9glementaire applicable \u00e0 chaque syst\u00e8me. Cette architecture pyramidale est la pierre angulaire de tout exercice de cartographie.<\/p>\n\n<div class=\"fig\">\n<div class=\"fig-head\"><span><span class=\"dots\"><span>\u25cf<\/span><span>\u25cf<\/span><span>\u25cf<\/span><\/span>FIGURE 01 \u00b7 PYRAMIDE DES RISQUES IA \u2014 R\u00c8GLEMENT (UE) 2024\/1689<\/span><span class=\"fig-tag\">ART. 5 \u00b7 6 \u00b7 50<\/span><\/div>\n<div class=\"pyramid\">\n<div class=\"pyr-tier t1\"><div><div class=\"label\">\u2298 INTERDIT<\/div><div class=\"article\">Article 5<\/div><\/div><div class=\"ex\">Notation sociale \u00b7 Manipulation<\/div><\/div>\n<div class=\"pyr-tier t2\"><div><div class=\"label\">\u26a0 RISQUE \u00c9LEV\u00c9<\/div><div class=\"article\">Article 6 + Annexe III<\/div><\/div><div class=\"ex\">Notation de cr\u00e9dit \u00b7 RH \u00b7 Biom\u00e9trie \u00b7 Infrastructure<\/div><\/div>\n<div class=\"pyr-tier t3\"><div><div class=\"label\">RISQUE LIMIT\u00c9<\/div><div class=\"article\">Article 50<\/div><\/div><div class=\"ex\">Chatbots \u00b7 IA g\u00e9n\u00e9rative \u00b7 Recommandations<\/div><\/div>\n<div class=\"pyr-tier t4\"><div><div class=\"label\">\u2713 RISQUE MINIMAL<\/div><div class=\"article\">Aucune obligation sp\u00e9cifique<\/div><\/div><div class=\"ex\">Filtres anti-spam \u00b7 Jeux vid\u00e9o \u00b7 Outils de productivit\u00e9<\/div><\/div>\n<\/div>\n<div class=\"fig-foot\">R\u00e8glement (UE) 2024\/1689, articles 5, 6 et 50 \u2014 structure de classification des risques<\/div>\n<\/div>\n\n<h2>2. Importance et enjeux<\/h2>\n\n<h3>Enjeux \u00e9conomiques et financiers<\/h3>\n<p>Les sanctions pr\u00e9vues \u00e0 l&#x27;article 99 du r\u00e8glement sont \u00e0 la mesure des enjeux. Le non-respect des dispositions relatives aux pratiques interdites en mati\u00e8re d&#x27;IA expose les organisations \u00e0 des amendes pouvant atteindre 35 millions d&#x27;euros ou 71 % de leur chiffre d&#x27;affaires annuel mondial. Le non-respect des obligations applicables aux syst\u00e8mes \u00e0 haut risque peut entra\u00eener des sanctions pouvant aller jusqu&#x27;\u00e0 15 millions d&#x27;euros ou 31 % du chiffre d&#x27;affaires.<\/p>\n\n<div class=\"fig\">\n<div class=\"fig-head\"><span><span class=\"dots\"><span>\u25cf<\/span><span>\u25cf<\/span><span>\u25cf<\/span><\/span>FIGURE 02 \u00b7 STRUCTURE DES SANCTIONS \u2014 ARTICLE 99, R\u00c8GLEMENT (UE) 2024\/1689<\/span><span class=\"fig-tag\">ART. 99<\/span><\/div>\n<div class=\"sanctions\">\n<div class=\"sanc\"><div class=\"sanc-lbl\">ARTICLE 5 CONTREFA\u00c7ON<\/div><div class=\"sanc-val\">35 millions d'euros<\/div><div class=\"sanc-pct\">ou le chiffre d&#x27;affaires mondial de 7%<\/div><div class=\"sanc-desc\">Pratiques d'IA interdites<\/div><\/div>\n<div class=\"sanc s2\"><div class=\"sanc-lbl\">ARTICLES 9-15 CONTREFA\u00c7ON<\/div><div class=\"sanc-val\">15 millions d'euros<\/div><div class=\"sanc-pct\">ou le chiffre d&#x27;affaires mondial de 3%<\/div><div class=\"sanc-desc\">Obligations des syst\u00e8mes \u00e0 haut risque<\/div><\/div>\n<div class=\"sanc s3\"><div class=\"sanc-lbl\">INFORMATIONS INCORRECTES<\/div><div class=\"sanc-val\">7,5 M\u20ac<\/div><div class=\"sanc-pct\">ou le chiffre d&#x27;affaires mondial de 1%<\/div><div class=\"sanc-desc\">Fausses d\u00e9clarations aux autorit\u00e9s<\/div><\/div>\n<\/div>\n<div class=\"fig-foot\">Le montant le plus \u00e9lev\u00e9 entre le montant fixe et le pourcentage du chiffre d'affaires s'applique \u2014 Article 99(5)<\/div>\n<\/div>\n\n<h3>Enjeux r\u00e9glementaires<\/h3>\n<p>Le r\u00e8glement sur l'IA s'inscrit dans un contexte de convergence r\u00e9glementaire avec le RGPD (r\u00e8glement (UE) 2016\/679) et, pour les organisations financi\u00e8res, avec le r\u00e8glement DORA (r\u00e8glement (UE) 2022\/2554). La cartographie des flux d'IA est le point de rencontre de ces trois cadres r\u00e9glementaires : un exercice unique et bien men\u00e9 peut servir simultan\u00e9ment les trois r\u00e9gimes de conformit\u00e9.<\/p>\n\n<h3>Enjeux technologiques<\/h3>\n<p>La <em>IA d'ombre<\/em> Ce ph\u00e9nom\u00e8ne, \u00e0 savoir l&#x27;utilisation non d\u00e9clar\u00e9e de syst\u00e8mes d&#x27;IA par les \u00e9quipes op\u00e9rationnelles sans supervision centralis\u00e9e, rend l&#x27;inventaire d\u00e9claratif seul insuffisant. Selon des \u00e9tudes r\u00e9centes du cabinet Gartner, plus de 40 % de l&#x27;utilisation de l&#x27;IA en entreprise en 2025 \u00e9chappera \u00e0 la supervision informatique centralis\u00e9e.<\/p>\n\n<h1 style=\"margin-top:64px\">II. Analyse d\u00e9taill\u00e9e : Classification et champ d'application<\/h1>\n<div class=\"aiact-divider\"><\/div>\n\n<h2>1. Situation actuelle et calendrier r\u00e9glementaire<\/h2>\n<p>Le r\u00e8glement (UE) 2024\/1689 suit un calendrier d'application progressif, dont chaque \u00e9tape g\u00e9n\u00e8re des obligations et des actions de mise en conformit\u00e9 sp\u00e9cifiques \u00e0 anticiper.<\/p>\n\n<div class=\"fig\">\n<div class=\"fig-head\"><span><span class=\"dots\"><span>\u25cf<\/span><span>\u25cf<\/span><span>\u25cf<\/span><\/span>FIGURE 03 \u00b7 CALENDRIER D'APPLICATION \u2014 R\u00c8GLEMENT (UE) 2024\/1689<\/span><span class=\"fig-tag\">CHRONOLOGIE<\/span><\/div>\n<div class=\"timeline\">\n<div class=\"tl-item\"><div class=\"tl-dot\"><\/div><div class=\"tl-date\">1er ao\u00fbt 2024<\/div><div class=\"tl-title\">Le r\u00e8glement entre en vigueur <span class=\"tl-pill\">EFFICACE<\/span><\/div><div class=\"tl-desc\">Publication au JOUE \u2014 d\u00e9but du cycle d\u2019application progressif<\/div><\/div>\n<div class=\"tl-item\"><div class=\"tl-dot\"><\/div><div class=\"tl-date\">2 F\u00c9V. 2025<\/div><div class=\"tl-title\">Pratiques interdites + litt\u00e9ratie en IA <span class=\"tl-pill\">EFFICACE<\/span><\/div><div class=\"tl-desc\">Article 5 (interdictions) + obligations d'IA pour la formation des organisations<\/div><\/div>\n<div class=\"tl-item\"><div class=\"tl-dot\"><\/div><div class=\"tl-date\">2 ao\u00fbt 2025<\/div><div class=\"tl-title\">obligations relatives aux IA \u00e0 usage g\u00e9n\u00e9ral, mod\u00e8les d'IA \u00e0 usage g\u00e9n\u00e9ral <span class=\"tl-pill\">EFFICACE<\/span><\/div><div class=\"tl-desc\">Chapitre V, Articles 51-56 \u2014 Fournisseurs de LLM, mod\u00e8les fondamentaux<\/div><\/div>\n<div class=\"tl-item\"><div class=\"tl-dot urgent\"><\/div><div class=\"tl-date\">2 ao\u00fbt 2026<\/div><div class=\"tl-title\">\u26a1 DATE LIMITE PRINCIPALE, syst\u00e8mes \u00e0 haut risque Annexe III <span class=\"tl-pill urgent\">URGENT<\/span><\/div><div class=\"tl-desc\">Articles 9 \u00e0 15 + Article 26 \u2014 obligations compl\u00e8tes pour les fournisseurs ET les d\u00e9ployeurs<\/div><\/div>\n<div class=\"tl-item\"><div class=\"tl-dot\"><\/div><div class=\"tl-date\">2 AO\u00db 2027<\/div><div class=\"tl-title\">Annexe I produits r\u00e9glement\u00e9s <span class=\"tl-pill\">2027<\/span><\/div><div class=\"tl-desc\">IA dans les dispositifs m\u00e9dicaux, les machines, les a\u00e9ronefs \u2014 Annexe I compl\u00e8te de la directive<\/div><\/div>\n<\/div>\n<div class=\"fig-foot\">R\u00e8glement (UE) 2024\/1689, article 113 \u2014 entr\u00e9e en vigueur et application<\/div>\n<\/div>\n\n<h2>2. Probl\u00e8mes rencontr\u00e9s<\/h2>\n\n<h3>La voie de classification \u00e0 double pond\u00e9ration (Article 6)<\/h3>\n<p>L'article 6 d\u00e9finit deux voies distinctes pour qu'un syst\u00e8me d'IA soit qualifi\u00e9 de haut risque. La ma\u00eetrise de ces deux voies est essentielle \u00e0 toute cartographie exhaustive.<\/p>\n<p><strong>Voie 1, Article 6(1) :<\/strong> Un syst\u00e8me d'IA constituant un composant de s\u00e9curit\u00e9 d'un produit couvert par l'annexe I (dispositifs m\u00e9dicaux, machines, ascenseurs, v\u00e9hicules, a\u00e9ronefs) est automatiquement \u00e0 haut risque si le produit est soumis \u00e0 une \u00e9valuation de conformit\u00e9 par un tiers.<\/p>\n<p><strong>Voie 2, Article 6(2) :<\/strong> Un syst\u00e8me appartenant \u00e0 l'une des huit cat\u00e9gories de l'annexe III est pr\u00e9sum\u00e9 \u00e0 haut risque, \u00e0 moins que la clause d'exclusion de l'article 6, paragraphe 3, ne s'applique.<\/p>\n\n<div class=\"fig\">\n<div class=\"fig-head\"><span><span class=\"dots\"><span>\u25cf<\/span><span>\u25cf<\/span><span>\u25cf<\/span><\/span>FIGURE 04 \u00b7 8 ANNEXE III CAT\u00c9GORIES \u2014 SYST\u00c8MES D'IA \u00c0 HAUT RISQUE<\/span><span class=\"fig-tag\">ANNEXE III<\/span><\/div>\n<div class=\"annexes\">\n<div class=\"annex\"><div class=\"annex-num\">01<\/div><div class=\"annex-icon\">\ud83d\udd0d<\/div><div class=\"annex-title\">Biom\u00e9trie<\/div><div class=\"annex-tags\">Identification \u00b7 V\u00e9rification \u00b7 Cat\u00e9gorisation<\/div><\/div>\n<div class=\"annex\"><div class=\"annex-num\">02<\/div><div class=\"annex-icon\">\u26a1<\/div><div class=\"annex-title\">Infrastructures critiques<\/div><div class=\"annex-tags\">\u00c9nergie \u00b7 Eau \u00b7 Transport \u00b7 R\u00e9seaux<\/div><\/div>\n<div class=\"annex\"><div class=\"annex-num\">03<\/div><div class=\"annex-icon\">\ud83c\udf93<\/div><div class=\"annex-title\">\u00c9ducation et formation<\/div><div class=\"annex-tags\">\u00c9valuation \u00b7 Orientation \u00b7 Examens<\/div><\/div>\n<div class=\"annex\"><div class=\"annex-num\">04<\/div><div class=\"annex-icon\">\ud83d\udc65<\/div><div class=\"annex-title\">Emploi et RH<\/div><div class=\"annex-tags\">ATS \u00b7 \u00c9valuation \u00b7 Surveillance du lieu de travail<\/div><\/div>\n<div class=\"annex\"><div class=\"annex-num\">05<\/div><div class=\"annex-icon\">\ud83d\udcbc<\/div><div class=\"annex-title\">Services essentiels<\/div><div class=\"annex-tags\">Notation de cr\u00e9dit \u00b7 Prestations sociales \u00b7 Assurance<\/div><\/div>\n<div class=\"annex\"><div class=\"annex-num\">06<\/div><div class=\"annex-icon\">\u2696<\/div><div class=\"annex-title\">Forces de l'ordre<\/div><div class=\"annex-tags\">Polygraphie \u00b7 Preuve \u00b7 Profilage<\/div><\/div>\n<div class=\"annex\"><div class=\"annex-num\">07<\/div><div class=\"annex-icon\">\ud83c\udf0d<\/div><div class=\"annex-title\">Migration et fronti\u00e8res<\/div><div class=\"annex-tags\">Risque de s\u00e9curit\u00e9 \u00b7 Asile \u00b7 Contr\u00f4le<\/div><\/div>\n<div class=\"annex\"><div class=\"annex-num\">08<\/div><div class=\"annex-icon\">\ud83c\udfdb<\/div><div class=\"annex-title\">Justice et D\u00e9mocratie<\/div><div class=\"annex-tags\">Assistance judiciaire \u00b7 Influence \u00e9lectorale<\/div><\/div>\n<\/div>\n<div class=\"fig-foot\">R\u00e8glement (UE) 2024\/1689, annexe III \u2014 liste des syst\u00e8mes d'IA \u00e0 haut risque vis\u00e9s \u00e0 l\u2019article 6, paragraphe 2<\/div>\n<\/div>\n\n<div class=\"warning-box\">\n<h4>\u2298 LIMITE ABSOLUE : PROFILAGE<\/h4>\n<p>Quel que soit la configuration d'utilisation, un syst\u00e8me d'IA r\u00e9pertori\u00e9 \u00e0 l'annexe III qui ex\u00e9cute <strong>profilage de personnes physiques<\/strong> ne peut jamais b\u00e9n\u00e9ficier de la clause d'exclusion de l'article 6(3). Cette limite est explicitement fix\u00e9e par le R\u00e8glement.<\/p>\n<\/div>\n\n<h2>3. Cas concrets et exemples<\/h2>\n\n<div class=\"case c1\">\n<h4>\ud83d\udcbc \u00c9TUDE DE CAS 1, Le paradoxe des RH : l'ATS pr\u00e9sum\u00e9 \u00e0 haut risque<\/h4>\n<p>Un ATS (Applicant Tracking System) int\u00e9grant des fonctionnalit\u00e9s de notation et de tri automatique des candidats rel\u00e8ve de la cat\u00e9gorie 4 de l'Annexe III. M\u00eame si l'outil est pr\u00e9sent\u00e9 comme une simple \" aide \u00e0 la d\u00e9cision \", d\u00e8s lors qu'il structure la pr\u00e9sentation des candidats et oriente le choix du recruteur, il ne peut g\u00e9n\u00e9ralement pas b\u00e9n\u00e9ficier de l'exclusion de l'article 6(3). R\u00e9sultat : les obligations des articles 9 \u00e0 15 sont pleinement applicables.<\/p>\n<\/div>\n\n<div class=\"case c2\">\n<h4>\ud83c\udfe6 CAS 2, Notation automatis\u00e9e de cr\u00e9dit<\/h4>\n<p>Un mod\u00e8le de notation de cr\u00e9dit utilis\u00e9 par un \u00e9tablissement financier rel\u00e8ve de la cat\u00e9gorie 5 de l'Annexe III (services essentiels). Son impact direct sur l'acc\u00e8s au cr\u00e9dit des personnes physiques le qualifie automatiquement de haut risque, avec les obligations correspondantes en mati\u00e8re d'explicabilit\u00e9 (article 13), de supervision humaine effective (article 14) et d'\u00e9valuation FRIA pour le d\u00e9ployeur (article 27).<\/p>\n<\/div>\n\n<div class=\"case c3\">\n<h4>\u2713 CAS 3, D\u00e9classification r\u00e9ussie<\/h4>\n<p>Un syst\u00e8me d'analyse pr\u00e9dictive de la consommation \u00e9nerg\u00e9tique d'un b\u00e2timent (cat\u00e9gorie 2 annexe III) peut b\u00e9n\u00e9ficier de l'exclusion de l'article 6(3) s'il se limite \u00e0 g\u00e9n\u00e9rer des alertes de d\u00e9passement de seuils sans influencer directement les d\u00e9cisions affectant des personnes physiques, sous r\u00e9serve que cette exclusion soit document\u00e9e formellement (article 6(4)).<\/p>\n<\/div>\n\n<h1 style=\"margin-top:64px\">III. Solutions et Recommandations : Les 5 \u00e9tapes cartographiques<\/h1>\n<div class=\"aiact-divider\"><\/div>\n\n<div class=\"fig\">\n<div class=\"fig-head\"><span><span class=\"dots\"><span>\u25cf<\/span><span>\u25cf<\/span><span>\u25cf<\/span><\/span>FIGURE 05 \u00b7 APER\u00c7U \u2014 M\u00c9THODOLOGIE EN 5 \u00c9TAPES<\/span><span class=\"fig-tag\">PROCESSUS<\/span><\/div>\n<div class=\"process5\">\n<div class=\"proc-step\"><div class=\"step-circle s1\">1<\/div><div class=\"name\">Gouvernance et p\u00e9rim\u00e8tre<\/div><div class=\"desc\">\u00c9quipe \u00b7 RACI \u00b7 P\u00e9rim\u00e8tre<\/div><\/div>\n<div class=\"proc-arrow\">\u2192<\/div>\n<div class=\"proc-step\"><div class=\"step-circle s2\">2<\/div><div class=\"name\">Inventaire exhaustif<\/div><div class=\"desc\">Enregistrer \u00b7 Shadow AI \u00b7 Sheets<\/div><\/div>\n<div class=\"proc-arrow\">\u2192<\/div>\n<div class=\"proc-step\"><div class=\"step-circle s3\">3<\/div><div class=\"name\">Classification<\/div><div class=\"desc\">Art. 6 \u00b7 Annexe III \u00b7 Arbre<\/div><\/div>\n<div class=\"proc-arrow\">\u2192<\/div>\n<div class=\"proc-step\"><div class=\"step-circle s4\">4<\/div><div class=\"name\">Exposition et priorit\u00e9s<\/div><div class=\"desc\">Gap \u00b7 FRIA \u00b7 Plan d'action<\/div><\/div>\n<div class=\"proc-arrow\">\u2192<\/div>\n<div class=\"proc-step\"><div class=\"step-circle s5\">5<\/div><div class=\"name\">Documentation et gouvernance<\/div><div class=\"desc\">Annexe IV \u00b7 Registre de l'UE \u00b7 Maintenance<\/div><\/div>\n<\/div>\n<div class=\"fig-foot\">M\u00e9thodologie Neo Coeur Intelligence \u2014 chaque \u00e9tape produit des livrables auditable<\/div>\n<\/div>\n\n<h2>\u00c9tape 1, Constitution de l'\u00e9quipe et d\u00e9finition du p\u00e9rim\u00e8tre<\/h2>\n<div class=\"step-card sc1\"><div class=\"step-num-box\"><div class=\"n\">1<\/div><div class=\"l\">\u00c9tape<\/div><\/div><div class=\"step-body\"><h4>Gouvernance et d\u00e9finition de la port\u00e9e<\/h4><p>Identifier les parties prenantes, d\u00e9finir les limites de la cartographie et \u00e9tablir la gouvernance du projet, condition indispensable \u00e0 l'exhaustivit\u00e9 de l'inventaire.<\/p><\/div><\/div>\n\n<p>La cartographie des flux d'IA va bien au-del\u00e0 des limites de l'IT seule. Les syst\u00e8mes susceptibles de pr\u00e9senter un risque \u00e9lev\u00e9 se retrouvent dans les RH (recrutement, \u00e9valuation), la Finance\/Gestion des risques (notation, actuariat), les Op\u00e9rations (supervision de l'infrastructure) et le Juridique. Constituer d\u00e8s le d\u00e9part une \u00e9quipe multidisciplinaire est une condition sine qua non.<\/p>\n\n<ul class=\"aiact-ul arrow\">\n<li>Parrainage : RSSI ou DPO selon l'organisation<\/li>\n<li>Repr\u00e9sentants de l'entreprise : RH, Finance\/Risque, Op\u00e9rations, Marketing, Juridique<\/li>\n<li>DSI \/ Architecte d'entreprise : inventaire technique<\/li>\n<li>Avocat sp\u00e9cialis\u00e9 en IA : interpr\u00e9tation des articles 6 et annexe III<\/li>\n<li>Comit\u00e9 ex\u00e9cutif : validation de la classification et arbitrage budg\u00e9taire<\/li>\n<\/ul>\n\n<p>Le p\u00e9rim\u00e8tre doit couvrir l'organisation \u00e0 la fois comme <strong>fournisseur<\/strong> (Article 3(3), d\u00e9veloppe ou a d\u00e9velopp\u00e9) ET tel que <strong>d\u00e9ployer<\/strong> (Article 3, paragraphe 4, utilisation sous sa responsabilit\u00e9), les obligations diff\u00e9rant substantiellement selon ce r\u00f4le.<\/p>\n\n<h2>\u00c9tape 2, Effectuer l'inventaire exhaustif<\/h2>\n<div class=\"step-card sc2\"><div class=\"step-num-box\"><div class=\"n\">2<\/div><div class=\"l\">\u00c9tape<\/div><\/div><div class=\"step-body\"><h4>Inventaire de tous les syst\u00e8mes d'IA<\/h4><p>Inventaire de tous les syst\u00e8mes d'IA d\u00e9ploy\u00e9s, en d\u00e9veloppement ou en cours d'acquisition, y compris l'IA fant\u00f4me, dans toutes les unit\u00e9s commerciales.<\/p><\/div><\/div>\n\n<p>Quatre m\u00e9thodes compl\u00e9mentaires doivent \u00eatre combin\u00e9es pour assurer l'exhaustivit\u00e9 :<\/p>\n<ol class=\"aiact-ol\">\n<li><strong>Questionnaire d\u00e9claratif aux unit\u00e9s commerciales<\/strong>, une forme structur\u00e9e identifiant les outils d'IA (automatisation, TAL, vision, recommandation).<\/li>\n<li><strong>Analyse des achats et des contrats<\/strong>, revue des licences SaaS (Microsoft 365 Copilot, Salesforce Einstein, Workday, SAP SuccessFactors).<\/li>\n<li><strong>Revue technique du portefeuille d'applications<\/strong>, frameworks d'IA (TensorFlow, PyTorch, API OpenAI, Anthropic, Google).<\/li>\n<li><strong>Entretiens avec des \u00e9quipes de science des donn\u00e9es<\/strong>, mod\u00e8les d\u00e9velopp\u00e9s en interne, pipelines automatis\u00e9s.<\/li>\n<\/ol>\n\n<h2>\u00c9tape 3, Classifier selon la grille de risque de l'IA Act<\/h2>\n<div class=\"step-card sc3\"><div class=\"step-num-box\"><div class=\"n\">3<\/div><div class=\"l\">\u00c9tape<\/div><\/div><div class=\"step-body\"><h4>Appliquer la grille de classification<\/h4><p>Appliquez les articles 5, 6 et les annexes I, II, III \u00e0 chaque syst\u00e8me inventori\u00e9 pour en d\u00e9terminer le niveau de risque et les obligations correspondantes.<\/p><\/div><\/div>\n\n<p>La classification suit un arbre de d\u00e9cision s\u00e9quentiel de huit questions :<\/p>\n<ol class=\"aiact-ol\">\n<li>Le syst\u00e8me ex\u00e9cute-t-il une pratique interdite par l'article 5 ? \u2192 Interdiction absolue<\/li>\n<li>S'agit-il d'un composant de s\u00e9curit\u00e9 d'un produit de l'annexe I soumis \u00e0 une \u00e9valuation par tierce partie ? \u2192 Risque \u00e9lev\u00e9, art. 6(1)<\/li>\n<li>Potentiellement \u00e0 haut risque, Art. 6(2). appartien-elle \u00e0 l'une des 8 cat\u00e9gories de l'Annexe III\u00a0?<\/li>\n<li>Si Annexe III : effectue-t-elle du profilage ? \u2192 Risque \u00e9lev\u00e9 sans d\u00e9rogation possible<\/li>\n<li>Si l'annexe III et aucun profilage : remplit-elle l'une des conditions d'exclusion de l'article 6, paragraphe 3 ?<\/li>\n<li>Si oui \u00e0 la rubrique 6(3) : documentation obligatoire, article 6(4)<\/li>\n<li>Est-ce un mod\u00e8le GPAI (Chapitre V) ? \u2192 Obligations des articles 53 et 55<\/li>\n<li>Le syst\u00e8me g\u00e9n\u00e8re-t-il du contenu sans transparence ? \u2192 Art. 50<\/li>\n<\/ol>\n\n<h2>\u00c9tape 4, \u00c9valuer l'exposition et prioriser les actions<\/h2>\n<div class=\"step-card sc4\"><div class=\"step-num-box\"><div class=\"n\">4<\/div><div class=\"l\">\u00c9tape<\/div><\/div><div class=\"step-body\"><h4>Analyse des \u00e9carts et plan d'action prioris\u00e9<\/h4><p>Identifier les obligations applicables selon le r\u00f4le (fournisseur\/d\u00e9ployeur), \u00e9valuer la maturit\u00e9 actuelle et prioriser les actions de conformit\u00e9.<\/p><\/div><\/div>\n\n<div class=\"fig\">\n<div class=\"fig-head\"><span><span class=\"dots\"><span>\u25cf<\/span><span>\u25cf<\/span><span>\u25cf<\/span><\/span>FIGURE 06 \u00b7 OBLIGATIONS DU PRESTATAIRE \u2014 ARTICLES 9 \u00c0 15 (SYST\u00c8MES \u00c0 HAUT RISQUE)<\/span><span class=\"fig-tag\">ART. 9-15<\/span><\/div>\n<div class=\"articles-list\">\n<div class=\"art-row\"><div class=\"art-num\">ARTICLE 9<\/div><div class=\"art-name\">Gestion des risques<\/div><div class=\"art-desc\">Processus it\u00e9ratif couvrant l'ensemble du cycle de vie, tests d'identification, d'\u00e9valuation et de v\u00e9rification<\/div><div class=\"art-bar\" style=\"--c1:#F1C40F;--c2:#F1C40F\"><\/div><\/div>\n<div class=\"art-row\"><div class=\"art-num\">ARTICLE 10<\/div><div class=\"art-name\">Gouvernance des donn\u00e9es<\/div><div class=\"art-desc\">Documentation de l'origine, de la pr\u00e9paration et de la repr\u00e9sentativit\u00e9 des donn\u00e9es d'entra\u00eenement, mesures anti-biais<\/div><div class=\"art-bar\" style=\"--c1:#F1C40F;--c2:#22D3EE\"><\/div><\/div>\n<div class=\"art-row\"><div class=\"art-num\">ARTICLE 11<\/div><div class=\"art-name\">Documentation technique<\/div><div class=\"art-desc\">les 14 rubriques minimales d\u00e9finies \u00e0 l&#x27;annexe IV, mises \u00e0 jour \u00e0 chaque modification substantielle<\/div><div class=\"art-bar\" style=\"--c1:#22D3EE;--c2:#22D3EE\"><\/div><\/div>\n<div class=\"art-row\"><div class=\"art-num\">ARTICLE 12<\/div><div class=\"art-name\">Journalisation automatique<\/div><div class=\"art-desc\">Tenir des journaux permettant la tra\u00e7abilit\u00e9 et le suivi de la production sur une p\u00e9riode d\u00e9finie<\/div><div class=\"art-bar\" style=\"--c1:#22D3EE;--c2:#3498DB\"><\/div><\/div>\n<div class=\"art-row\"><div class=\"art-num\">ARTICLE 13<\/div><div class=\"art-name\">Transparence<\/div><div class=\"art-desc\">Informations claires sur le fonctionnement, les capacit\u00e9s et les limites, instructions d'utilisation compl\u00e8tes<\/div><div class=\"art-bar\" style=\"--c1:#3498DB;--c2:#5B6EE1\"><\/div><\/div>\n<div class=\"art-row\"><div class=\"art-num\">ARTICLE 14<\/div><div class=\"art-name\">Supervision humaine<\/div><div class=\"art-desc\">Aptitude effective de l'op\u00e9rateur \u00e0 comprendre, surveiller, corriger et arr\u00eater le syst\u00e8me<\/div><div class=\"art-bar\" style=\"--c1:#5B6EE1;--c2:#9B59B6\"><\/div><\/div>\n<div class=\"art-row\"><div class=\"art-num\">ARTICLE 15<\/div><div class=\"art-name\">Pr\u00e9cision, Robustesse et Cybers\u00e9curit\u00e9<\/div><div class=\"art-desc\">Niveaux de performance d\u00e9finis et document\u00e9s, r\u00e9sistance aux erreurs et aux attaques contradictoires, protection contre la manipulation<\/div><div class=\"art-bar\" style=\"--c1:#9B59B6;--c2:#E74C3C\"><\/div><\/div>\n<\/div>\n<div class=\"fig-foot\">R\u00e8glement (UE) 2024\/1689, Chapitre III, Section 2 \u2014 Obligations des fournisseurs de syst\u00e8mes d'IA \u00e0 haut risque<\/div>\n<\/div>\n\n<h2>\u00c9tape 5, Documenter, Enregistrer et Maintenir dans le Temps<\/h2>\n<div class=\"step-card sc5\"><div class=\"step-num-box\"><div class=\"n\">5<\/div><div class=\"l\">\u00c9tape<\/div><\/div><div class=\"step-body\"><h4>Documentation formelle et gouvernance continue<\/h4><p>Produire la documentation de l'Annexe IV, s'enregistrer dans la base de donn\u00e9es europ\u00e9enne (Article 49) et \u00e9tablir des processus pour maintenir le mappage.<\/p><\/div><\/div>\n\n<p>L'article 49 impose l'enregistrement des syst\u00e8mes d'IA \u00e0 haut risque dans le <strong>base de donn\u00e9es europ\u00e9enne accessible au public<\/strong> avant la mise sur le march\u00e9 (fournisseurs) ou la mise en service (certains exploitants). L&#x27;annexe VIII du r\u00e8glement d\u00e9finit les informations \u00e0 fournir.<\/p>\n\n<p>La documentation technique (annexe IV) doit comporter au moins 14 rubriques : architecture, donn\u00e9es d&#x27;apprentissage, indicateurs de performance, gestion des risques, robustesse, cybers\u00e9curit\u00e9, mode d&#x27;emploi, supervision humaine pr\u00e9vue, plan de surveillance post-commercialisation. Cette documentation doit \u00eatre mise \u00e0 jour \u00e0 chaque modification substantielle du syst\u00e8me.<\/p>\n\n<h3>Gouvernance continue<\/h3>\n<p>Trois m\u00e9canismes organisationnels sont essentiels pour maintenir la cartographie au fil du temps :<\/p>\n<ul class=\"aiact-ul arrow\">\n<li><strong>Processus d'IA de pr\u00e9-approbation<\/strong>, toute nouvelle initiative en IA passe par un examen de classification avant son d\u00e9veloppement ou son achat.<\/li>\n<li><strong>Examen annuel de la cartographie<\/strong>, audit complet de l'inventaire, mise \u00e0 jour des classifications, alignement avec les cycles de reporting de NIS2.<\/li>\n<li><strong>Veille r\u00e9glementaire continue<\/strong>, surveillance des publications de la Commission europ\u00e9enne (Bureau de l\u2019IA), du Parlement europ\u00e9en et des autorit\u00e9s nationales comp\u00e9tentes.<\/li>\n<\/ul>\n\n<div class=\"checklist-box\">\n<h3>\ud83d\udccb LISTE DE CONTR\u00d4LE POUR LA MISE EN \u0152UVRE DE LA LOI SUR L&#x27;IA<\/h3>\n<h3>\u00c9tape 1, Gouvernance<\/h3>\n<ul>\n<li>\u00c9quipe pluridisciplinaire \u00e9tablie (CISO\/DPO + M\u00e9tier + IT + Juridique + Direction)<\/li>\n<li>Port\u00e9e organisationnelle et g\u00e9ographique document\u00e9e<\/li>\n<li>R\u00f4les et responsabilit\u00e9s formalis\u00e9s dans RACI<\/li>\n<li>Calendrier du projet avec jalons approuv\u00e9s<\/li>\n<\/ul>\n<h3>\u00c9tape 2, Inventaire<\/h3>\n<ul>\n<li>Questionnaire d\u00e9claratif envoy\u00e9 \u00e0 toutes les unit\u00e9s commerciales<\/li>\n<li>Contrats de fournisseurs et licences SaaS analys\u00e9s<\/li>\n<li>Portefeuille d'applications examin\u00e9 avec la DSI<\/li>\n<li>Registre d'inventaire IA construit<\/li>\n<li>Fiches descriptives produites pour chaque syst\u00e8me<\/li>\n<\/ul>\n<h3>\u00c9tape 3, Classification<\/h3>\n<ul>\n<li>Arbre de d\u00e9cision de la loi sur l'IA appliqu\u00e9 \u00e0 chaque syst\u00e8me<\/li>\n<li>Syst\u00e8mes interdits (Article 5) identifi\u00e9s, plan de retrait en cours<\/li>\n<li>Syst\u00e8mes \u00e0 haut risque classifi\u00e9s avec base l\u00e9gale document\u00e9e<\/li>\n<li>Notes de d\u00e9classification de l'article 6(3) r\u00e9dig\u00e9es et conserv\u00e9es<\/li>\n<li>Mod\u00e8les GPAI (Chapitre V) identifi\u00e9s<\/li>\n<\/ul>\n<h3>\u00c9tape 4, Exposition et priorisation<\/h3>\n<ul>\n<li>Obligations du fournisseur vs d\u00e9ployeur identifi\u00e9es par syst\u00e8me<\/li>\n<li>\u00c9valuation de la maturit\u00e9 effectu\u00e9e par syst\u00e8me<\/li>\n<li>FRIA men\u00e9e pour les d\u00e9ployeurs concern\u00e9s (article 26(9))<\/li>\n<li>Plan d'action prioris\u00e9 et budg\u00e9tis\u00e9 valid\u00e9 par la direction<\/li>\n<\/ul>\n<h3>\u00c9tape 5, Documentation et gouvernance continue<\/h3>\n<ul>\n<li>Documentation de l'Annexe IV r\u00e9dig\u00e9e pour chaque syst\u00e8me \u00e0 haut risque<\/li>\n<li>Enregistrement dans la base de donn\u00e9es europ\u00e9enne (Article 49) termin\u00e9<\/li>\n<li>Processus d'IA de pr\u00e9-approbation en place<\/li>\n<li>Veille r\u00e9glementaire organis\u00e9e et planifi\u00e9e<\/li>\n<\/ul>\n<\/div>\n\n<h1 style=\"margin-top:64px\">IV. Conclusion<\/h1>\n<div class=\"aiact-divider\"><\/div>\n\n<p>La cartographie des flux d'IA sensibles au titre du r\u00e8glement (UE) 2024\/1689 va au-del\u00e0 d'une simple obligation r\u00e9glementaire. Elle constitue le fondement d'une gouvernance responsable de l'IA, le point de d\u00e9part de toute strat\u00e9gie de conformit\u00e9 cr\u00e9dible, et l'opportunit\u00e9 pour chaque organisation d'\u00e9valuer pleinement son patrimoine algorithmique : ses forces, ses vuln\u00e9rabilit\u00e9s et ses responsabilit\u00e9s.<\/p>\n\n<p>Les cinq \u00e9tapes pr\u00e9sent\u00e9es dans cet article (constituer l'\u00e9quipe, r\u00e9aliser l'inventaire, classer selon la grille de l'IA Act, \u00e9valuer l'exposition, documenter sur le long terme) forment un processus coh\u00e9rent et progressif. Elles s'appliquent \u00e0 toute organisation, quelle que soit sa maturit\u00e9 initiale. La checklist propos\u00e9e constitue un outil de pilotage imm\u00e9diatement op\u00e9rationnel pour les RSSI, DPO et les \u00e9quipes de conformit\u00e9.<\/p>\n\n<p>Oui, il est possible de cartographier rigoureusement les flux d'IA sensibles avant le 2 ao\u00fbt 2026. La condition est simple : commencez d\u00e8s maintenant, adoptez une approche pluridisciplinaire et consid\u00e9rez cet exercice comme un investissement strat\u00e9gique dans la r\u00e9silience et la comp\u00e9titivit\u00e9 de l'organisation.<\/p>\n\n<p>Les organisations qui adoptent cette approche aujourd'hui ne se soucient pas de la conformit\u00e9 \u00e0 l'AI Act. Elles l'utilisent pour surpasser leurs concurrents, rassurer leurs clients et obtenir des contrats dans un environnement num\u00e9rique de plus en plus r\u00e9glement\u00e9. Sur un march\u00e9 o\u00f9 la confiance algorithmique devient un facteur de diff\u00e9renciation d\u00e9cisif, une cartographie de l'AI Act bien men\u00e9e n'est pas un co\u00fbt, c'est une intelligence.<\/p>\n\n<div class=\"cta-box\">\n<h3>\u00c9valuez votre exposition \u00e0 la loi sur l'IA<\/h3>\n<p style=\"font-size:16px;font-weight:700;color:#22D3EE\">Premiers 30 minutes d'appel offertes<\/p>\n<p>Neo Coeur Intelligence aide les organisations \u00e0 mener leur cartographie de l'AI Act de bout en bout, avec des livrables directement utilisables devant les autorit\u00e9s nationales comp\u00e9tentes.<\/p>\n<p>\ud83d\udce7 contact@neocoeurintelligence.com \u00b7 \ud83c\udf10 <a href=\"https:\/\/neocoeurintelligence.com\/fr\/\" style=\"color:#22D3EE\">neocoeurintelligence.com<\/a> \u00b7 \ud83d\udccd Londres \u00b7 Paris<\/p>\n<a class=\"cta-btn\" href=\"https:\/\/neocoeurintelligence.com\/fr\/assess-my-ai-risk\/\">\u2192 \u00c9valuer mes risques li\u00e9s \u00e0 l'IA<\/a>\n<a class=\"cta-btn\" href=\"https:\/\/calendly.com\/contact-neocoeurintelligence\/30min\">Prendre un rendez-vous<\/a>\n<\/div>\n\n<h1 style=\"margin-top:64px\">V. R\u00e9f\u00e9rences bibliographiques<\/h1>\n<div class=\"aiact-divider\"><\/div>\n\n<div class=\"refs\">\n<p><strong>Textes l\u00e9gislatifs officiels<\/strong><\/p>\n<p>R\u00e8glement (UE) 2024\/1689 du Parlement europ\u00e9en et du Conseil du 13 juin 2024 (loi sur l'IA). JOUE L, 12 juillet 2024. <a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=CELEX%3A32024R1689\">eur-lex.europa.eu<\/a><\/p>\n<p>R\u00e8glement (UE) 2016\/679 du 27 avril 2016 (RGPD). JOUE L 119, 4 mai 2016. <a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=CELEX%3A32016R0679\">eur-lex.europa.eu<\/a><\/p>\n<p>R\u00e8glement (UE) 2022\/2554 du 14 d\u00e9cembre 2022 (DORA). JOUE L 333, 27 d\u00e9cembre 2022. <a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=CELEX%3A32022R2554\">eur-lex.europa.eu<\/a><\/p>\n<p>Directive (UE) 2022\/2555 du 14 d\u00e9cembre 2022 (NIS2). JOCE L 333, 27 d\u00e9cembre 2022.<\/p>\n<p style=\"margin-top:18px\"><strong>Publications officielles de la Commission europ\u00e9enne et de l'AI Office<\/strong><\/p>\n<p>Commission europ\u00e9enne. Projet de lignes directrices sur la classification des syst\u00e8mes d'IA \u00e0 haut risque en application de l'article 6. 19 mai 2026, consultation publique jusqu'au 23 juin 2025. <a href=\"https:\/\/www.leto.legal\/news\/lignes-directrices-commission-ia-haut-risque-annexe-iii-2026\">leto.legal<\/a><\/p>\n<p>Guichet d'assistance de la loi sur l'IA, Commission europ\u00e9enne. Explorateur de la loi sur l'IA. <a href=\"https:\/\/ai-act-service-desk.ec.europa.eu\">ai-act-service-desk.ec.europa.eu<\/a><\/p>\n<p>Bureau de l'IA. Orientations sur la port\u00e9e des obligations des fournisseurs de mod\u00e8les d'IA \u00e0 usage g\u00e9n\u00e9ral (IAUG). 18 juillet 2025.<\/p>\n<p>Institut pour l'avenir de la vie. Explorateur de la loi sur l'IA. <a href=\"https:\/\/artificialintelligenceact.eu\">intelligenceartificielleacte.eu<\/a><\/p>\n<p style=\"margin-top:18px\"><strong>Analyses doctrinales et guides de conformit\u00e9<\/strong><\/p>\n<p>Abilene Academy. Loi europ\u00e9enne sur l'IA, le guide complet de conformit\u00e9 pour la date limite du 2 ao\u00fbt 2026. Mai 2026.<\/p>\n<p>Marine de la Clergerie. Loi sur l'IA Article 6 : R\u00e8gles de classification des syst\u00e8mes d'IA comme syst\u00e8mes \u00e0 haut risque. MDC Avocat, 19 mai 2026.<\/p>\n<p>Cloix Mend\u00e8s-Gil. Syst\u00e8mes d'IA : les 4 niveaux de risque de la r\u00e9glementation europ\u00e9enne. 17 juin 2025.<\/p>\n<p>Aumans Avocats. Loi sur l'IA : Syst\u00e8mes d'IA \u00e0 Haut Risque, Quels sont les D\u00e9fis et Obligations ? 28 mars 2025.<\/p>\n<p>Steptoe. Obligations de l'UE concernant l'IA pour les mod\u00e8les GPAI applicables d\u00e8s le 5 ao\u00fbt 2025.<\/p>\n<p>Modulos. R\u00e8glement europ\u00e9en sur l'IA, Mod\u00e8les d'IA \u00e0 usage g\u00e9n\u00e9ral (Chapitre V, Articles 51-56). Mai 2026.<\/p>\n<p>Gartner Research. IA fant\u00f4me dans les organisations d'entreprise, donn\u00e9es d'enqu\u00eate 2025.<\/p>\n<\/div>\n\n<p style=\"font-family:'Source Sans Pro',Arial,sans-serif;font-size:12px;color:#7B8794;margin-top:40px;text-align:center;border-top:1px solid #DDE5EB;padding-top:20px\">\u00a9 2026 Neo Coeur Intelligence, tous droits r\u00e9serv\u00e9s.<br>Cet article est fourni \u00e0 titre informatif uniquement et ne constitue pas un avis juridique.<br><a href=\"https:\/\/neocoeurintelligence.com\/fr\/\" style=\"color:#1F7A8C\">www.neocoeurintelligence.com<\/a><\/p>\n\n<\/div>\n<\/div>\n\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>ART-03 \u00b7 Neo Coeur Intelligence \u00b7 Published: May 2026 \u00b7 Updated: EC Guidelines May 19,&hellip;<\/p>","protected":false},"author":4,"featured_media":26651,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[105],"tags":[],"class_list":["post-26660","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-conformite-regulation-ia"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>AI Act: The 5 Steps to Map Your Sensitive AI Flows - NEO COEUR INTELLIGENCE<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/neocoeurintelligence.com\/fr\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:url\" content=\"https:\/\/neocoeurintelligence.com\/fr\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\/\" \/>\n<meta property=\"og:site_name\" content=\"NEO COEUR INTELLIGENCE\" \/>\n<meta property=\"article:published_time\" content=\"2026-06-09T08:05:08+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-12T10:09:12+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/neocoeurintelligence.com\/wp-content\/uploads\/2026\/06\/VISUEL_AI-1024x576.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"576\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Herman NOUBOUM NOUBI\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/x.com\/NeoCoeurAII\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"Herman NOUBOUM NOUBI\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"19 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/neocoeurintelligence.com\\\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/neocoeurintelligence.com\\\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\\\/\"},\"author\":{\"name\":\"Herman NOUBOUM NOUBI\",\"@id\":\"https:\\\/\\\/neocoeurintelligence.com\\\/#\\\/schema\\\/person\\\/862d5ea0e68544036a095e14d8d6d43b\"},\"headline\":\"AI Act: The 5 Steps to Map Your Sensitive AI Flows\",\"datePublished\":\"2026-06-09T08:05:08+00:00\",\"dateModified\":\"2026-06-12T10:09:12+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/neocoeurintelligence.com\\\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\\\/\"},\"wordCount\":2524,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/neocoeurintelligence.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/neocoeurintelligence.com\\\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/neocoeurintelligence.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/VISUEL_AI.png\",\"articleSection\":[\"Conformit\u00e9 &amp; R\u00e9gulation IA\"],\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/neocoeurintelligence.com\\\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/neocoeurintelligence.com\\\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\\\/\",\"url\":\"https:\\\/\\\/neocoeurintelligence.com\\\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\\\/\",\"name\":\"AI Act: The 5 Steps to Map Your Sensitive AI Flows - NEO COEUR INTELLIGENCE\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/neocoeurintelligence.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/neocoeurintelligence.com\\\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/neocoeurintelligence.com\\\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/neocoeurintelligence.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/VISUEL_AI.png\",\"datePublished\":\"2026-06-09T08:05:08+00:00\",\"dateModified\":\"2026-06-12T10:09:12+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/neocoeurintelligence.com\\\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/neocoeurintelligence.com\\\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/neocoeurintelligence.com\\\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\\\/#primaryimage\",\"url\":\"https:\\\/\\\/neocoeurintelligence.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/VISUEL_AI.png\",\"contentUrl\":\"https:\\\/\\\/neocoeurintelligence.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/VISUEL_AI.png\",\"width\":1920,\"height\":1080},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/neocoeurintelligence.com\\\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/neocoeurintelligence.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AI Act: The 5 Steps to Map Your Sensitive AI Flows\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/neocoeurintelligence.com\\\/#website\",\"url\":\"https:\\\/\\\/neocoeurintelligence.com\\\/\",\"name\":\"NEO COEUR INTELLIGENCE\",\"description\":\"Artificial Neural Network\",\"publisher\":{\"@id\":\"https:\\\/\\\/neocoeurintelligence.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/neocoeurintelligence.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/neocoeurintelligence.com\\\/#organization\",\"name\":\"NEO COEUR INTELLIGENCE\",\"url\":\"https:\\\/\\\/neocoeurintelligence.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/neocoeurintelligence.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/neocoeurintelligence.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/cropped-logo-inline@0.5x.png\",\"contentUrl\":\"https:\\\/\\\/neocoeurintelligence.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/cropped-logo-inline@0.5x.png\",\"width\":350,\"height\":124,\"caption\":\"NEO COEUR INTELLIGENCE\"},\"image\":{\"@id\":\"https:\\\/\\\/neocoeurintelligence.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/neocoeurintelligence.com\\\/#\\\/schema\\\/person\\\/862d5ea0e68544036a095e14d8d6d43b\",\"name\":\"Herman NOUBOUM NOUBI\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f2671da842f8d36ef2625566ace50ab9e8418575accb19c1c5eb18113bb95529?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f2671da842f8d36ef2625566ace50ab9e8418575accb19c1c5eb18113bb95529?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f2671da842f8d36ef2625566ace50ab9e8418575accb19c1c5eb18113bb95529?s=96&d=mm&r=g\",\"caption\":\"Herman NOUBOUM NOUBI\"},\"description\":\"Founder of Neo Coeur Intelligence, a Paris \\\/ London-based startup specializing in artificial intelligence applied to cybersecurity. Expert in AI-driven cybersecurity, regulatory compliance (EU AI Act, NIS2, DORA, UK GDPR, NIST AI RMF, SR 11-7), and secure systems architecture. Vision: Protect intelligence wherever it develops.\",\"sameAs\":[\"https:\\\/\\\/www.neocoeurintelligence.com\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/111622800\\\/admin\\\/dashboard\\\/\",\"https:\\\/\\\/x.com\\\/https:\\\/\\\/x.com\\\/NeoCoeurAII\"],\"url\":\"https:\\\/\\\/neocoeurintelligence.com\\\/fr\\\/author\\\/herman\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"AI Act: The 5 Steps to Map Your Sensitive AI Flows - NEO COEUR INTELLIGENCE","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/neocoeurintelligence.com\/fr\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\/","og_locale":"fr_FR","og_type":"article","og_url":"https:\/\/neocoeurintelligence.com\/fr\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\/","og_site_name":"NEO COEUR INTELLIGENCE","article_published_time":"2026-06-09T08:05:08+00:00","article_modified_time":"2026-06-12T10:09:12+00:00","og_image":[{"width":1024,"height":576,"url":"https:\/\/neocoeurintelligence.com\/wp-content\/uploads\/2026\/06\/VISUEL_AI-1024x576.png","type":"image\/png"}],"author":"Herman NOUBOUM NOUBI","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/x.com\/NeoCoeurAII","twitter_misc":{"\u00c9crit par":"Herman NOUBOUM NOUBI","Dur\u00e9e de lecture estim\u00e9e":"19 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/neocoeurintelligence.com\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\/#article","isPartOf":{"@id":"https:\/\/neocoeurintelligence.com\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\/"},"author":{"name":"Herman NOUBOUM NOUBI","@id":"https:\/\/neocoeurintelligence.com\/#\/schema\/person\/862d5ea0e68544036a095e14d8d6d43b"},"headline":"AI Act: The 5 Steps to Map Your Sensitive AI Flows","datePublished":"2026-06-09T08:05:08+00:00","dateModified":"2026-06-12T10:09:12+00:00","mainEntityOfPage":{"@id":"https:\/\/neocoeurintelligence.com\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\/"},"wordCount":2524,"commentCount":0,"publisher":{"@id":"https:\/\/neocoeurintelligence.com\/#organization"},"image":{"@id":"https:\/\/neocoeurintelligence.com\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\/#primaryimage"},"thumbnailUrl":"https:\/\/neocoeurintelligence.com\/wp-content\/uploads\/2026\/06\/VISUEL_AI.png","articleSection":["Conformit\u00e9 &amp; R\u00e9gulation IA"],"inLanguage":"fr-FR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/neocoeurintelligence.com\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/neocoeurintelligence.com\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\/","url":"https:\/\/neocoeurintelligence.com\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\/","name":"AI Act: The 5 Steps to Map Your Sensitive AI Flows - NEO COEUR INTELLIGENCE","isPartOf":{"@id":"https:\/\/neocoeurintelligence.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/neocoeurintelligence.com\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\/#primaryimage"},"image":{"@id":"https:\/\/neocoeurintelligence.com\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\/#primaryimage"},"thumbnailUrl":"https:\/\/neocoeurintelligence.com\/wp-content\/uploads\/2026\/06\/VISUEL_AI.png","datePublished":"2026-06-09T08:05:08+00:00","dateModified":"2026-06-12T10:09:12+00:00","breadcrumb":{"@id":"https:\/\/neocoeurintelligence.com\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/neocoeurintelligence.com\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/neocoeurintelligence.com\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\/#primaryimage","url":"https:\/\/neocoeurintelligence.com\/wp-content\/uploads\/2026\/06\/VISUEL_AI.png","contentUrl":"https:\/\/neocoeurintelligence.com\/wp-content\/uploads\/2026\/06\/VISUEL_AI.png","width":1920,"height":1080},{"@type":"BreadcrumbList","@id":"https:\/\/neocoeurintelligence.com\/ai-act-the-5-steps-to-map-your-sensitive-ai-flows\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/neocoeurintelligence.com\/"},{"@type":"ListItem","position":2,"name":"AI Act: The 5 Steps to Map Your Sensitive AI Flows"}]},{"@type":"WebSite","@id":"https:\/\/neocoeurintelligence.com\/#website","url":"https:\/\/neocoeurintelligence.com\/","name":"NEO C\u0152UR INTELLIGENCE","description":"R\u00e9seau de neurones artificiels","publisher":{"@id":"https:\/\/neocoeurintelligence.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/neocoeurintelligence.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/neocoeurintelligence.com\/#organization","name":"NEO C\u0152UR INTELLIGENCE","url":"https:\/\/neocoeurintelligence.com\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/neocoeurintelligence.com\/#\/schema\/logo\/image\/","url":"https:\/\/neocoeurintelligence.com\/wp-content\/uploads\/2026\/05\/cropped-logo-inline@0.5x.png","contentUrl":"https:\/\/neocoeurintelligence.com\/wp-content\/uploads\/2026\/05\/cropped-logo-inline@0.5x.png","width":350,"height":124,"caption":"NEO COEUR INTELLIGENCE"},"image":{"@id":"https:\/\/neocoeurintelligence.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/neocoeurintelligence.com\/#\/schema\/person\/862d5ea0e68544036a095e14d8d6d43b","name":"Herman NOUBOUM NOUBI","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/secure.gravatar.com\/avatar\/f2671da842f8d36ef2625566ace50ab9e8418575accb19c1c5eb18113bb95529?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f2671da842f8d36ef2625566ace50ab9e8418575accb19c1c5eb18113bb95529?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f2671da842f8d36ef2625566ace50ab9e8418575accb19c1c5eb18113bb95529?s=96&d=mm&r=g","caption":"Herman NOUBOUM NOUBI"},"description":"Fondateur de Neo Coeur Intelligence, une startup bas\u00e9e \u00e0 Paris et Londres sp\u00e9cialis\u00e9e dans l'intelligence artificielle appliqu\u00e9e \u00e0 la cybers\u00e9curit\u00e9. Expert en cybers\u00e9curit\u00e9 pilot\u00e9e par l'IA, en conformit\u00e9 r\u00e9glementaire (RGAA UE, NIS2, DORA, RGPD Royaume-Uni, NIST AI RMF, SR 11-7) et en architecture de syst\u00e8mes s\u00e9curis\u00e9s. Vision : Prot\u00e9ger l'intelligence partout o\u00f9 elle se d\u00e9veloppe.","sameAs":["https:\/\/www.neocoeurintelligence.com","https:\/\/www.linkedin.com\/company\/111622800\/admin\/dashboard\/","https:\/\/x.com\/https:\/\/x.com\/NeoCoeurAII"],"url":"https:\/\/neocoeurintelligence.com\/fr\/author\/herman\/"}]}},"_links":{"self":[{"href":"https:\/\/neocoeurintelligence.com\/fr\/wp-json\/wp\/v2\/posts\/26660","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/neocoeurintelligence.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/neocoeurintelligence.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/neocoeurintelligence.com\/fr\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/neocoeurintelligence.com\/fr\/wp-json\/wp\/v2\/comments?post=26660"}],"version-history":[{"count":16,"href":"https:\/\/neocoeurintelligence.com\/fr\/wp-json\/wp\/v2\/posts\/26660\/revisions"}],"predecessor-version":[{"id":26691,"href":"https:\/\/neocoeurintelligence.com\/fr\/wp-json\/wp\/v2\/posts\/26660\/revisions\/26691"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/neocoeurintelligence.com\/fr\/wp-json\/wp\/v2\/media\/26651"}],"wp:attachment":[{"href":"https:\/\/neocoeurintelligence.com\/fr\/wp-json\/wp\/v2\/media?parent=26660"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/neocoeurintelligence.com\/fr\/wp-json\/wp\/v2\/categories?post=26660"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/neocoeurintelligence.com\/fr\/wp-json\/wp\/v2\/tags?post=26660"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}