GCRI · Fields across the Consortium
Spatial intelligenceObservations, models and their uncertainty in one view
AI risk management asks what a system can do, how it fails, who is affected and who is accountable. The lifecycle matters: capability can change after deployment, and harms can be diffuse.
Individual AI failures (biased outputs, hallucinated facts, unsafe actions by an agent) are well catalogued. Systemic effects arise when many actors use similar models trained on similar data, when AI is embedded in critical decisions such as credit or triage, or when capability shifts faster than oversight. Assessment has to cover the model, the system it sits in and the institution operating it.
| Layer | Typical risk | Assessment |
|---|---|---|
| Model | Robustness, bias, capability for misuse | Evaluations and red teaming |
| System | Integration errors, over-reliance, data leakage | Impact assessment, human oversight design |
| Institution | Unclear accountability, missing incident response | Management system audit (ISO/IEC 42001) |
| Ecosystem | Homogeneity, concentration, correlated failure | Market and dependency analysis |
| Framework or body | What it governs or supplies |
|---|---|
| NIST AI RMF and its generative AI profile | Govern, map, measure and manage functions |
| ISO/IEC 42001 and ISO/IEC 23894 | AI management systems and AI risk management guidance |
| EU AI Act | Risk-tiered obligations applied in stages; check current dates for each obligation |
| OECD AI Principles and UNESCO Recommendation on the Ethics of AI | Intergovernmental principles |
The science sits on AI and Autonomous Systems; methods start from AI assurance.
The bodies and documents this page is read against. Status and editions change; each link goes to the issuing body.
Nexus Reports is the Consortium's quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.
Never send personal data, sensitive infrastructure detail or anything you have no right to share. A contribution is reviewed before use; sending it confers no authorship or editorial rights, and sponsorship never buys a finding.
The current service level is R0: information and enquiries. An enquiry receives a reference and names the next step; applications, payments, compute allocations and registrations open only when their team, terms and review capacity exist.
Maps, data and figures on this site are shown for context and general information. They are not advice, forecasts or warnings; the limits of the information are set out in the Disclaimers and Data Notices.