Generative AI at Work / Unit 2 GAI 049 worked example, 60 to 90 seconds
A Risk Scan for One Use
The idea
Before a team adopts generative AI for a task, a short risk scan built from NIST's profile shows where checks and policy are needed, and where they are not.
In practice
Step one: describe the use in one sentence: who uses the tool, on what material, to produce what, for whom. Step two: walk the twelve risks and mark each one as not relevant, possible or likely for this use. Step three: for each possible or likely risk, rate its consequence if it happened, from minor to severe, remembering that risk combines likelihood and consequence. Step four: for anything likely or severe, write down the control: who checks the output, what may not be pasted, and who signs off. Later units supply those controls.
Where people slip
A scan done once and filed away goes stale. Repeat it when the tool, the material or the audience changes.
Your place on the trail
Every lesson rests on earlier ones and opens later ones. Tap any to jump.
Something wrong in this lesson? Flag it · Sources for Generative AI at Work