For Heads-of · Practitioner
Missing AI impact assessment process
AI systems are deployed without a structured process to assess their impact on individuals, groups, and society before go-live.
- high
- governance
- impact-assessment
How it happens
A new AI system goes through standard project sign-off, but no one runs a structured assessment of who it affects, how, and what could go wrong for them specifically, before it goes live.
Why it matters
This is the control that's supposed to catch several of the other risks in this library before deployment; without it, every downstream fairness, transparency, and oversight gap has to be caught individually, if at all.
Mitigating controls
The controls that address this risk, ranked by effectiveness.
Framework and clause references
| Framework | Clause | Title |
|---|---|---|
| ISO/IEC 42001:2023 | Annex A.5 | Assessing impacts of AI systems |
| EU AI Act | Article 9 | Risk management system |
Related resources
The external sources behind this risk, from the Resources library.