Capgemini has been selected, as leader of a consortium, by the European Commission’s AI Office, established within DG CNECT (Directorate-General for Communications Networks, Content and Technology), to support the cyber threat modeling and risk assessment related to advanced AI systems, in the context of the European Union’s AI Act. The assignment is part of the EU’s AI Safety program and focuses on assessing and mitigating cyber offence risks associated with General‑Purpose AI (GPAI) models.
Capgemini will help strengthen Europe’s ability to assess, monitor and mitigate the systemic cyber offense risks associated with advanced General Purpose AI (GPAI) models. As these models rapidly gain autonomous and cyber-relevant capabilities, such as automated vulnerability discovery, exploit generation, or large-scale cyber-attack orchestration, Europe needs robust harmonized evaluation frameworks to ensure these technologies are deployed safely and responsibly across the EU.
Capgemini brings its expertise in AI, cybersecurity and compliance to support the AI Office in its core mission: the development and use of trustworthy AI. This includes modelling emerging cyber offence risks, developing evaluation tools, designing technical compliance methodologies, and conducting on‑demand technical assessments. Capgemini will support the AI Office to identify systemic risks and effectively enforce the AI Act’s obligations for GPAI providers.
“As Europe deploys the world’s first comprehensive AI safety framework, this work with the European Commission reflects our shared commitment to ensuring AI technologies are developed and deployed responsibly. By combining scientific rigor, operational expertise, and experience in operationalizing trusted AI, Capgemini is proud to help strengthen Europe’s digital resilience,” said Andrea Falleni, CEO of Capgemini’s Southern Europe region and Group Executive Board Member.
Capgemini is leading a dedicated consortium with Wavestone and the French public institution LNE (Laboratoire National de Métrologie et d’Essais), bringing together complementary expertise in cybersecurity risk management, operational security, AI evaluation and conformity assessment to help the European Commission keep pace with fast-evolving AI-driven cyber threats.
