Which of the following is the MOST important consideration when determining mitigation controls for an AI system?
Mitigation controls should be justified by their effectiveness and cost relative to the potential business loss from unmitigated AI risk. This aligns risk treatment with the organization’s exposure and ensures controls are proportionate to the consequences they are intended to reduce.
Community Discussion