Risks.
Named risks, not vague hazards: each entry is a specific, recognised AI risk, with the controls that mitigate it, the clauses that cite it and the sources behind it. 169 risks across 16 categories.
Severity by category
A compact map of the whole register before you filter it.
| Category | critical | high | medium | low | Total |
|---|---|---|---|---|---|
| Governance & Accountability | – | 11 | 10 | – | 21 |
| Model Performance & Reliability | – | 7 | 6 | – | 13 |
| Data Protection & Privacy | 2 | 7 | 4 | – | 13 |
| Fairness, Bias & Impact | – | 4 | 5 | – | 9 |
| Conduct & Customer Outcomes | – | 8 | 4 | – | 12 |
| Transparency & Explainability | – | 2 | 4 | – | 6 |
| Human Factors & Workforce | – | 4 | 3 | – | 7 |
| Model & Application Security | – | 12 | 5 | – | 17 |
| Adversarial ML & Model Integrity | 1 | 4 | 3 | – | 8 |
| Agentic & Autonomous Systems | 1 | 10 | 4 | – | 15 |
| Generative Content & Information Integrity | 1 | 2 | 5 | – | 8 |
| Intellectual Property & Legal Liability | – | 5 | 3 | – | 8 |
| Third-Party & Supply Chain | – | 5 | 4 | – | 9 |
| Operational Resilience | – | 7 | 2 | – | 9 |
| Prohibited & High-Risk Practices | 8 | 1 | – | – | 9 |
| Systemic & Societal | – | 2 | 2 | 1 | 5 |
Browse by list, category or framework
6 of 169 risks shown.
| ID | Risk | Category | Severity |
|---|---|---|---|
| R-169 | Environmental footprint of AI The energy, water and hardware that training and running AI require conflict with the organisation's environmental commitments, or go unmeasured and undisclosed. | Systemic & Societal | Medium |
| R-092 | Inadequate board oversight of AI The board and senior management lack the information, expertise or forum to challenge AI risk, and approve what they cannot evaluate. | Governance & Accountability | High |
| R-165 | Model monoculture and herding Many organisations rely on the same few models, providers and data, so they make the same errors, react in the same way and fail at the same time. | Systemic & Societal | High |
| R-027 | No documented AI policy The organisation uses AI without a policy, approved by top management, that states what is permitted, what is required and who decides. | Governance & Accountability | High |
| R-091 | Undefined AI risk appetite No statement exists of how much AI risk the organisation will accept, so approvals are inconsistent and nothing triggers escalation. | Governance & Accountability | Medium |
| R-163 | Workforce displacement and job quality AI deployment removes roles or makes the remaining work worse, without assessment, involvement of the people affected or a plan for transition. | Human Factors & Workforce | Medium |