Nordvik Region and Hansa Mutual: Platform and Security Conclusions

All courses / AI Platform and Security / Module 6 / Chapter 24

Learning objectives

After the lesson the participant can:

• Summarise the platform and security decisions of Nordvik Region and Hansa Mutual and the records that hold them.
• Explain the four causes of the differences between the two platforms.
• Assess what worked and what was hard in each case and what each can learn from the other.
• Draft a prioritised platform and security roadmap as a checkable artefact.

Key concepts

Reduced platform around a procured core

Nordvik Region's shape: the gateway, the registry and acceptance suites the authority owns, with existing identity, logging and archive services as the control plane, no agent runtime, and model-building left to the supplier.

Group baseline with market overlays

Hansa Mutual's shape: one shared platform with an overlay per entity that may tighten the baseline but never relax it, selected by the policy engine from a system's declared markets and checked against where it is processed.

Controls that follow the claim

At the Polish service centre the controls attach to the claim, not the building: the chapter's own conclusion is that the agent's permissions, log retention and notification route must follow the claim's market wherever the server stands.

Roadmap as code

The plans recorded as version-controlled artefacts with items, horizons, deadlines and references to decision records, exceptions and risk entries, so that one pipeline can check that every referenced record exists and every deadline is met.

Interactive exercises

Do them here and get feedback at once. Choose a card and then where it belongs, or drag it.

Teaching plan

Discussion

1. At Nordvik Region capacity, not policy, decides when a compliant placement becomes available. What decides it in your organisation?
2. The chapter says the market dimension worked at Hansa Mutual because it was declared in the first manifest and not added later. Which dimension of your own estate should have been in the first manifest?
3. Nordvik Region has no exit test for its triage supplier, and Hansa Mutual scales faster than each market's rules allow. Which of the two weaknesses is closer to yours, and what would the other organisation advise?

Written exercise

Self-test

Choose an answer to see whether it is right, or open the answer below each question.

1. Why did replacing Nordvik Region's ranking model with a version without postcode features need a new decision record and an updated FRIA?

   1. Because the supplier had changed and a new tender was required
   2. Because the system moved from on premises to a European cloud provider
   3. Because removing features lies outside the change envelope, so it could not pass as planned retraining
   4. Because the new version scored lower on precision at 100 than the evaluation criterion of the decision record allows
   Show the answer

   C. Because removing features lies outside the change envelope, so it could not pass as planned retraining
   Planned retraining within the envelope passes the gates as a planned change; new or removed features are listed outside it and need a new record and assessment.

2. Which of the four causes of difference between the two organisations does the chapter call the most consequential?

   1. Nordvik avoids Modes 3 and 5 outside its platform team, while Hansa uses both daily and needs layered containment
   2. Nordvik has two accelerators on order, whereas Hansa already reserves eight in Frankfurt and four in an EU cloud region
   3. Nordvik reports to an elected body, whereas Hansa reports to an executive board
   4. Nordvik uses open-weight models, whereas Hansa uses only vendor models
   Show the answer

   A. Nordvik avoids Modes 3 and 5 outside its platform team, while Hansa uses both daily and needs layered containment
   The other three causes are the deployer or provider role, the contract cycle against the pull request, and depth of public-law duty against consistency across overlays.

3. What makes Hansa Mutual's market overlays bite, according to the chapter?

   1. Each market keeps its own copy of the platform manifest and deploys it separately through its own release pipeline and gateway
   2. The group baseline is relaxed for entities outside the AI Act and DORA
   3. Legal changes are collected yearly and applied to all overlays at once
   4. The policy engine selects overlays from a system's declared markets and checks every processing location against them
   Show the answer

   D. The policy engine selects overlays from a system's declared markets and checks every processing location against them
   With that binding, a change that routed one market's claims through a location its overlay does not allow would fail before deployment.