One Threat Model, Three Views: The EU AI Act, ISO/IEC 42001 and IEC 62443 for AI in OT

Deep End Era. Engineering with Sankalp · Oct 29, 2026 · 1h 6m

OT security architect Priya Raghavan and integration engineer Tomás Iglesias have until Thursday to answer one paragraph from a German client: which of the plant's AI tools are high-risk, who is the provider, which standards apply, and where they sit in 62443. They answer it with one threat model and three views.

Chapters

00:00:00 Cold open: the email from Frankfurt

00:02:36 Where this episode sits

00:04:45 Why a law, and why now

00:07:59 The four tiers, by ear

00:09:36 Two doors into high risk

00:11:53 The worked example: classifying four AI tools

00:16:19 Provider, deployer, and the EPC in…