Risk Assessment
Risk assessment identifies and evaluates risks associated with an AI system, its intended use, and its operating context.Purpose
AIGO risk assessment supports informed governance decisions by establishing a structured view of potential risks and their treatment. Assessment may consider:- risk sources
- affected stakeholders
- potential impacts
- likelihood and severity
- existing controls
- residual risk
- treatment decisions
- risk acceptance
Relationship to controls
Risk assessment provides a basis for identifying appropriate controls. The relationship is: risk → treatment → controls → evidence → assuranceOngoing assessment
Risk assessment should be revisited when material changes occur, including changes to:- system functionality
- intended use
- data
- operating environment
- stakeholders
- regulatory requirements
- known incidents or emerging risks
Source
The canonical procedure is maintained in:guidance/02-procedures/03-AIGO-AI-Risk-Assessment-Procedure-v0.1.md
The machine-readable risk model is defined in:
schemas/02-risk/02-AIGO-Risk-Schema-v0.1.json