Skip to content

GCRI · Fields across the Consortium

Artificial intelligence

AI risk management asks what a system can do, how it fails, who is affected and who is accountable. The lifecycle matters: capability can change after deployment, and harms can be diffuse.

02Three mandates

The field, seen three ways.

03The systemic question

From model failure to systemic effect.

Individual AI failures (biased outputs, hallucinated facts, unsafe actions by an agent) are well catalogued. Systemic effects arise when many actors use similar models trained on similar data, when AI is embedded in critical decisions such as credit or triage, or when capability shifts faster than oversight. Assessment has to cover the model, the system it sits in and the institution operating it.

LayerTypical riskAssessment
ModelRobustness, bias, capability for misuseEvaluations and red teaming
SystemIntegration errors, over-reliance, data leakageImpact assessment, human oversight design
InstitutionUnclear accountability, missing incident responseManagement system audit (ISO/IEC 42001)
EcosystemHomogeneity, concentration, correlated failureMarket and dependency analysis
04Frameworks

Risk frameworks and law.

Framework or bodyWhat it governs or supplies
NIST AI RMF and its generative AI profileGovern, map, measure and manage functions
ISO/IEC 42001 and ISO/IEC 23894AI management systems and AI risk management guidance
EU AI ActRisk-tiered obligations applied in stages; check current dates for each obligation
OECD AI Principles and UNESCO Recommendation on the Ethics of AIIntergovernmental principles
05Couplings

Where AI risk lands.

The science sits on AI and Autonomous Systems; methods start from AI assurance.

ReportsContribute

Contribute evidence from this page.

Reports is the Consortium’s quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.

GCRI
The Global Centre for Risk and Innovation

Bring a method, a dataset or a question.

Information and enquiries are open today. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.