A property of a system or its context (autonomy, exposure, reversibility, vulnerable groups, data sensitivity, opacity) that moves the likelihood or severity of a risk without creating it 1. It is captured as registry fields at intake so a policy can compute the tier.
- Developed in
- ch. 13, Contributing factors and the use-case risk profile
- Chapters
- ch. 13, Risk Management
- Contrast with
- Risk source
- Source
- 1 numbered reference, listed below
Where it is used
One chapter of the Body of Knowledge uses the term. Each link opens the first section that does.
- 13 · Risk Management Identifying risk: sources, factors and stakeholders 2 mentions
Related terms
Sources
- [1] Artificial Intelligence Risk Management Framework (AI RMF 1.0), NIST AI 100-1 (risk tolerance and residual risk; seven trustworthy characteristics; transparency answers "what happened", explainability "how", interpretability "why"; MAP 1.1 intended purposes; MANAGE 1.1 go/no-go determination; profiles). NIST. 2023-01-26. https://doi.org/10.6028/NIST.AI.100-1 (verified: primary)
Definitions of legal terms paraphrase the cited text, which governs. Dated statements are as of .