RAIBR03-BP01 Identify the likelihood of each potential harm
Establish a risk rating methodology that considers the likelihood of the event occurring. The risk likelihood indicates the probability of a harmful event occurring when the system is deployed for the use case.
Level of risk exposed if this best practice is not established: High
Implementation considerations
-
Create a standardized likelihood scale with clear definitions. For example, establish ranges from almost certain (95%+ probability) to highly unlikely (less than 5% probability). Include specific frequency ranges for each category to maintain consistent evaluation.
-
Document likelihood assessments with supporting evidence. For example, consider a content moderation system where historical data shows harmful content detection failures occur in 15% of edge cases, placing this risk in the unlikely category. Include rationale for each assessment.
Resources
Related documents:
-
ISO/IEC 42001:2023
A.5.2 AI system impact assessment process
