What is AI risk management?
AI risk management is the continuous process of identifying, assessing, treating, monitoring and communicating risks that arise from AI systems throughout their lifecycle. It adapts general risk management to AI-specific issues such as bias, drift, opacity and misuse, and links decisions to documented evidence.
Article 9 of the EU AI Act requires providers of high-risk AI systems to run a documented risk management system across the lifecycle. ISO/IEC 23894 gives guidance on AI risk management, and the NIST AI RMF organises it around four core functions.
Source: Regulation (EU) 2024/1689 (the EU AI Act), EUR-Lex. Last reviewed . General information, not legal advice.