AI Risk Register

Core Workflow

1. Define AI system, workflow, users, data, model/vendor, autonomy level, and decision impact.
2. Identify risks across data, privacy, security, bias, hallucination, IP, compliance, human oversight, user adoption, operations, and vendor lock-in.
3. Score likelihood, impact, detectability, reversibility, and control maturity.
4. Define controls, owners, monitoring, review cadence, and escalation paths.
5. Separate pilot risks from production risks.
6. Flag risks requiring legal, security, privacy, people, finance, or executive review.

Safety Rules