Evolving AI Risk Management: A Maturity Model based on the NIST AI Risk Management Framework

Fuente: arXiv
Enregistré dans:
Détails bibliographiques
Auteurs principaux: Dotan, Ravit, Blili-Hamelin, Borhane, Madhavan, Ravi, Matthews, Jeanna, Scarpino, Joshua
Format: Preprint
Publié: 2024
Sujets:
Accès en ligne:
Tags: Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
_version_ 1866910328337465344
author Dotan, Ravit
Blili-Hamelin, Borhane
Madhavan, Ravi
Matthews, Jeanna
Scarpino, Joshua
author_facet Dotan, Ravit
Blili-Hamelin, Borhane
Madhavan, Ravi
Matthews, Jeanna
Scarpino, Joshua
contents Researchers, government bodies, and organizations have been repeatedly calling for a shift in the responsible AI community from general principles to tangible and operationalizable practices in mitigating the potential sociotechnical harms of AI. Frameworks like the NIST AI RMF embody an emerging consensus on recommended practices in operationalizing sociotechnical harm mitigation. However, private sector organizations currently lag far behind this emerging consensus. Implementation is sporadic and selective at best. At worst, it is ineffective and can risk serving as a misleading veneer of trustworthy processes, providing an appearance of legitimacy to substantively harmful practices. In this paper, we provide a foundation for a framework for evaluating where organizations sit relative to the emerging consensus on sociotechnical harm mitigation best practices: a flexible maturity model based on the NIST AI RMF.
format Preprint
id arxiv_https___arxiv_org_abs_2401_15229
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Evolving AI Risk Management: A Maturity Model based on the NIST AI Risk Management Framework
Dotan, Ravit
Blili-Hamelin, Borhane
Madhavan, Ravi
Matthews, Jeanna
Scarpino, Joshua
Computers and Society
Researchers, government bodies, and organizations have been repeatedly calling for a shift in the responsible AI community from general principles to tangible and operationalizable practices in mitigating the potential sociotechnical harms of AI. Frameworks like the NIST AI RMF embody an emerging consensus on recommended practices in operationalizing sociotechnical harm mitigation. However, private sector organizations currently lag far behind this emerging consensus. Implementation is sporadic and selective at best. At worst, it is ineffective and can risk serving as a misleading veneer of trustworthy processes, providing an appearance of legitimacy to substantively harmful practices. In this paper, we provide a foundation for a framework for evaluating where organizations sit relative to the emerging consensus on sociotechnical harm mitigation best practices: a flexible maturity model based on the NIST AI RMF.
title Evolving AI Risk Management: A Maturity Model based on the NIST AI Risk Management Framework
topic Computers and Society
url https://arxiv.org/abs/2401.15229