Risk · R-085 · Model Performance & Reliability
Inadequate pre-deployment testing
A system goes live without testing proportionate to its risk, including functional, safety, security and user testing in realistic conditions.
- Severity
- High
- Audience
- Heads-of · Practitioner
- Frameworks
- Principle 9 · Article 9 · Article 17 · Principle 3
- Responsible AI domain
- Lifecycle stage
- Reviewed
- 2026-11-10
What it is
Testing before release is the last point at which a fault is cheap to fix. For AI systems it has to cover more than whether the software runs: accuracy on realistic cases, behaviour at the edges, safety of outputs, resistance to misuse, performance across groups, and how real users interact with it. The risk is that some of this is skipped, often under pressure to launch, or that the test conditions bear little relation to production.
How it happens
- A deadline is fixed before the scope of testing is known.
- A demonstration to stakeholders stands in for testing.
- Tests use clean, curated inputs unlike real ones.
- Nobody defined what result would stop the release.
Why it matters
Faults reach customers and operations, where they are costlier to correct and may already have caused harm. A release with no test evidence also leaves the organisation unable to show that it took reasonable care.
Warning signs
- No acceptance criteria were agreed before testing began.
- Test evidence is absent from the approval record.
- Known failures were waived without a recorded owner.
- Testing was done only by the build team.
Who owns it
The system owner is accountable for the decision to release. Engineering and independent testers produce the evidence. The approving authority confirms that the criteria were met.
In practice
An insurer launches an assistant to answer policy questions after a week of internal trials in which staff asked the questions they expected. Customers ask about exclusions in ways nobody tried, and the assistant confirms cover that the policy does not give. The same pattern generalises to any release where testing reflected the builders' expectations of use.
Mitigating controls
Primary controls
- Pre-deployment testing and acceptance Preventive
- Defines the tests that must pass before release. Functional, safety, security and user tests defined in advance must pass, with results recorded, before an AI system is released.
Supporting controls
- AI red teaming Detective
- Adds adversarial testing for higher-risk systems. People skilled in attacking AI systems try to make the system fail as an adversary would, before release and periodically, and their findings are tracked to closure.
- AI risk tiering and classification Directive
- Sets how much testing is proportionate. Each system is assigned an internal risk tier and a regulatory class by documented criteria, the result is reviewed independently, and it is revisited whenever the system or its use changes.
- Staged rollout Preventive
- Limited release finds what testing missed. New AI systems and material changes are released first to a limited population under close monitoring, and extended only when defined criteria are met.
Framework and clause references
| Framework | Clause | Title |
|---|---|---|
| Code of Practice for the Cyber Security of AI | Principle 9 | Conduct appropriate testing and evaluation The testing principle. |
| EU AI Act | Article 9 | Risk management system Testing within risk management. |
| EU AI Act | Article 17 | Quality management system Test and validation procedures. |
| SS1/23: Model Risk Management Principles for Banks | Principle 3 | Model development, implementation and use Testing before implementation. |
Sources
- EU AI Act: Regulation (EU) 2024/1689 European Union (EUR-Lex) · official text
- SS1/23: Model Risk Management Principles for Banks Bank of England PRA · official text
Related terms
How to cite
Axiom Verity (2026). Inadequate pre-deployment testing. Reference Library, R-085. https://axiom-verity.com/risks/inadequate-pre-deployment-testing. Reviewed 2026-11-10.
Found an error or a better source? Report a correction.