Risk · R-085 · Model Performance & Reliability

Inadequate pre-deployment testing

A system goes live without testing proportionate to its risk, including functional, safety, security and user testing in realistic conditions.

Severity
High
Audience
Heads-of · Practitioner
Frameworks
Principle 9 · Article 9 · Article 17 · Principle 3
Responsible AI domain
Reviewed
2026-11-10

What it is

Testing before release is the last point at which a fault is cheap to fix. For AI systems it has to cover more than whether the software runs: accuracy on realistic cases, behaviour at the edges, safety of outputs, resistance to misuse, performance across groups, and how real users interact with it. The risk is that some of this is skipped, often under pressure to launch, or that the test conditions bear little relation to production.

How it happens

  • A deadline is fixed before the scope of testing is known.
  • A demonstration to stakeholders stands in for testing.
  • Tests use clean, curated inputs unlike real ones.
  • Nobody defined what result would stop the release.

Why it matters

Faults reach customers and operations, where they are costlier to correct and may already have caused harm. A release with no test evidence also leaves the organisation unable to show that it took reasonable care.

Warning signs

  • No acceptance criteria were agreed before testing began.
  • Test evidence is absent from the approval record.
  • Known failures were waived without a recorded owner.
  • Testing was done only by the build team.

Who owns it

The system owner is accountable for the decision to release. Engineering and independent testers produce the evidence. The approving authority confirms that the criteria were met.

In practice

An insurer launches an assistant to answer policy questions after a week of internal trials in which staff asked the questions they expected. Customers ask about exclusions in ways nobody tried, and the assistant confirms cover that the policy does not give. The same pattern generalises to any release where testing reflected the builders' expectations of use.

Mitigating controls

Primary controls

Pre-deployment testing and acceptance Preventive
Defines the tests that must pass before release. Functional, safety, security and user tests defined in advance must pass, with results recorded, before an AI system is released.

Supporting controls

AI red teaming Detective
Adds adversarial testing for higher-risk systems. People skilled in attacking AI systems try to make the system fail as an adversary would, before release and periodically, and their findings are tracked to closure.
AI risk tiering and classification Directive
Sets how much testing is proportionate. Each system is assigned an internal risk tier and a regulatory class by documented criteria, the result is reviewed independently, and it is revisited whenever the system or its use changes.
Staged rollout Preventive
Limited release finds what testing missed. New AI systems and material changes are released first to a limited population under close monitoring, and extended only when defined criteria are met.

Framework and clause references

FrameworkClauseTitle
Code of Practice for the Cyber Security of AIPrinciple 9Conduct appropriate testing and evaluation The testing principle.
EU AI ActArticle 9Risk management system Testing within risk management.
EU AI ActArticle 17Quality management system Test and validation procedures.
SS1/23: Model Risk Management Principles for BanksPrinciple 3Model development, implementation and use Testing before implementation.

Sources

EU AI Act: Regulation (EU) 2024/1689 European Union (EUR-Lex) · official text
SS1/23: Model Risk Management Principles for Banks Bank of England PRA · official text

Related terms

How to cite

Axiom Verity (2026). Inadequate pre-deployment testing. Reference Library, R-085. https://axiom-verity.com/risks/inadequate-pre-deployment-testing. Reviewed 2026-11-10.