GRCLibrary.ai

Annex

AI-Specific Risk Methodology Annex

This annex extends the enterprise risk assessment methodology in risk/procedure-risk-assessment-methodology.md with AI-specific risk dimensions, assessment criteria, and treatment guidance. It supports consistent identification, scoring, and management of risks arising from the development, deployment, and use of AI systems across the organization.

Type
Annex
Version
1.0.17
Date
2026-10-26
Owner
Chief Risk Officer
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
Risk Management: AI
Review frequency
Annual and upon material AI regulatory change or significant AI incident
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • Purpose
  • AI risk taxonomy
  • AI system risk classification
  • AI risk assessment dimensions
  • Composite AI risk score
  • AI-specific risk treatment options
  • AI risk review triggers
  • Regulatory context
  • Integration with AI governance

Related documents