Leading AI at Work: Governance, Rollout and Practice / Unit 6 LAI 141 worked example, 60 to 90 seconds
Choosing a Risk Response
The idea
NIST's Manage one point two and one point three ask teams to prioritize risks and to plan a response to each high-priority one, and name four kinds of response.
In practice
Step one: list the risks the review found for the feature, such as a drafted notice softening a denial's reason. Step two: rank them by impact, likelihood and the resources available to treat them, as NIST's subcategory asks. Step three: for each high-priority risk, choose one of NIST's four responses: mitigate it, transfer it, avoid it, or accept it. Step four: write the choice and the reason into the feature's documentation, linked from the affected Gold Pack. Step five: for a mitigated risk, name the control, such as a human approval step, and the test that shows it works.
Where people slip
Avoiding a risk often means narrowing the feature, for example keeping it away from the Gold thing entirely. Teams tend to reach for mitigation first, but avoidance is sometimes the cheaper and safer answer.
Your place on the trail
Every lesson rests on earlier ones and opens later ones. Tap any to jump.
Something wrong in this lesson? Flag it · Sources for Leading AI at Work: Governance, Rollout and Practice