Risk · R-133 · Operational Resilience
AI service outage
An inference service, model endpoint or supporting platform becomes unavailable, and the business process that depends on it stops or queues.
- Severity
- High
- Audience
- Heads-of · Practitioner
- Frameworks
- Article 6 · LLM06 · Impact tolerances · Important business services
- Responsible AI domain
- Lifecycle stage
- Reviewed
- 2026-11-11
What it is
AI systems run on a stack: the model endpoint, the retrieval index, the orchestration layer, the provider's platform and the network between them. Any of these can fail. Hosted models add dependencies the organisation does not control, including the provider's capacity, rate limits and regional availability. Because many firms use the same few providers, an outage tends to be shared. The risk is unavailability, as distinct from a model that is running badly, which is covered in AI model drift and degradation.
How it happens
- The provider suffers an incident or throttles requests during peak demand.
- A regional failure removes the only deployment the organisation uses.
- A supporting component, such as the vector store, fails.
- Credentials expire or a quota is exhausted.
Why it matters
If the model sits in the path of a customer journey or a control, that journey or control stops. Queues build, customers are turned away, and where the model performs a check such as fraud screening, the choice is between halting the process and running it unchecked.
Warning signs
- A single endpoint in a single region serves a critical process.
- Nobody has asked what the process does when the model does not answer.
- Rate limit errors appear at peak times.
- The provider's availability history has not been reviewed.
Who owns it
The system owner is accountable for availability. Engineering designs redundancy. The owner of the business process decides what happens when the system is down.
In practice
A retailer's customer contact runs entirely through an assistant built on one hosted model. The provider has a four-hour outage on the busiest day of the year. There is no queue to a human team and no static fallback. The same pattern generalises to any process that was redesigned around a model without asking what happens in its absence.
Mitigating controls
Primary controls
- Fallback and manual workaround Corrective
- Keeps the process running by other means when the AI is unavailable. A tested alternative, such as a manual process, a simpler model or a degraded mode, is ready to take over when an AI component fails or has to be withdrawn.
Supporting controls
- AI contract terms Directive
- Sets availability and support commitments. Contracts with AI suppliers cover data use, change notification, information and audit rights, sub-contracting, incident notification, liability and exit.
- Important business service impact-tolerance mapping Directive
- Shows which important business services the outage threatens. The AI components each important business service depends on are identified in the resilience map, and impact tolerances are set that cover AI-specific disruption, including a model that is running and wrong.
- Ongoing AI vendor monitoring Detective
- Tracks the supplier's service record. Each AI supplier's performance, incidents, model changes, terms and financial and operational standing are reviewed on a cycle set by how material the supplier is.
Framework and clause references
| Framework | Clause | Title |
|---|---|---|
| Digital Operational Resilience Act (DORA) | Article 6 | ICT risk management framework ICT risk management. |
| OWASP Top 10 for LLM Applications | LLM06 | Unbounded Consumption Denial of service is one cause. |
| SS1/21: Operational Resilience | Impact tolerances | Impact tolerances The tolerance it may breach. |
| SS1/21: Operational Resilience | Important business services | Identification of important business services The important business services the outage threatens. |
Sources
- SS1/21: Operational Resilience Bank of England PRA · official text
- OWASP Top 10 for LLM Applications OWASP GenAI Security Project · framework
Related terms
How to cite
Axiom Verity (2026). AI service outage. Reference Library, R-133. https://axiom-verity.com/risks/ai-service-outage. Reviewed 2026-11-11.
Found an error or a better source? Report a correction.