Capgemini to lead EU consortium assessing AI models’ cyber risks
- The European Commission’s AI Office picked a Capgemini-led consortium for AI risk work.
- The work covers cyber offence risks from general-purpose AI models under the AI Act.
- Capgemini’s consortium partners are Wavestone and France’s LNE.
- Capgemini did not disclose the contract’s value or length.
PARIS, FRANCE — Capgemini will lead a consortium helping the European Commission’s AI Office assess the cyber risks posed by advanced artificial intelligence models. The work supports enforcement of the European Union’s AI Act and focuses on the cyber offence risks of general-purpose AI (GPAI) models.
The AI Office, part of the Commission’s directorate for communications networks, content and technology, selected the group under Lot 2 of a 2025 procurement procedure. Capgemini’s partners are consulting firm Wavestone and France’s national metrology and testing laboratory, LNE.
Tools to test what AI models can do
Capgemini said the team will model emerging cyber offence risks, develop evaluation tools, design technical compliance methods and run on-demand technical assessments. The goal is to help the AI Office identify systemic risks and enforce the AI Act’s obligations on GPAI providers, the company said in a press release on Nov. 5.
Capgemini said these models are quickly gaining autonomous and cyber-relevant capabilities, such as automated vulnerability discovery, exploit generation and large-scale cyber-attack orchestration. It said Europe needs harmonized evaluation frameworks to ensure such technology is deployed safely.
The assignment sits within the EU’s AI Safety program, which develops tools, methods and benchmarks for evaluating general-purpose models and classifying those with systemic risks.
“As Europe deploys the world’s first comprehensive AI safety framework, this work with the European Commission reflects our shared commitment to ensuring AI technologies are developed and deployed responsibly,” said Andrea Falleni, chief executive of Capgemini’s Southern Europe region and a member of its group executive board.
A regulator buying technical capacity
The consortium brings together expertise in cybersecurity risk management, operational security, AI evaluation and conformity assessment. Capgemini did not disclose the value or length of the contract.
The arrangement puts testing work for the AI Act partly in the hands of private contractors. The AI Office, which Capgemini describes as the EU’s center of AI expertise, will rely on the consortium to keep pace with fast-changing AI-driven cyber threats.
What it means for buyers
Regulators are now buying the same AI testing skills that companies need to meet the rules. Firms building or deploying general-purpose models in Europe will face assessments shaped partly by outside contractors.
Companies setting up an AI governance framework or weighing cybersecurity outsourcing can compare partners in OA’s list of the top IT service providers in Europe.
Related news
- Hexaware named EBRD’s strategic technology partner for five years · 11 Nov 2026
- Cognizant completes Wizeline buy to add AI-native digital engineering · 10 Nov 2026
- Capgemini sells U.S. government unit to ITC Federal · 25 Sep 2026
Disclosure: Outsource Accelerator uses AI tools in the backend of its editorial workflow. Every article is reviewed and verified by a human editor before publication.
Stay ahead of the outsourcing industry. Join thousands of business leaders who rely on Outsource Accelerator for the news, trends, and expert insights that matter. Subscribe to our free newsletter and never miss an update.
