The rule that any scenario rated at the top severity level is Critical whatever its likelihood, cannot be accepted by the delivery team, and must be eliminated, reduced in severity or accepted explicitly by the governing body for a fixed period. NIST asks that such risks can be ceased safely 1.
- Developed in
- ch. 13, The catastrophic-severity override
- Chapters
- ch. 13, Risk Management
- Source
- 1 numbered reference, listed below
Where it is used
One chapter of the Body of Knowledge uses the term. Each link opens the first section that does.
- 13 · Risk Management Risk appetite and tolerance, compiled into gates 3 mentions
Sources
- [1] Artificial Intelligence Risk Management Framework (AI RMF 1.0), NIST AI 100-1 (risk tolerance and residual risk; seven trustworthy characteristics; transparency answers "what happened", explainability "how", interpretability "why"; MAP 1.1 intended purposes; MANAGE 1.1 go/no-go determination; profiles). NIST. 2023-01-26. https://doi.org/10.6028/NIST.AI.100-1 (verified: primary)
Definitions of legal terms paraphrase the cited text, which governs. Dated statements are as of .