RAIBR03-BP02 Identify the severity of each potential harm
Risk severity estimates the magnitude of the negative on affected stakeholder groups if it were to occur. Severity also considers the reversibility of harm, recognizing that some types of harm may be permanent or difficult to remedy.
Level of risk exposed if this best practice is not established: High
Implementation considerations
-
Create standardized severity scale with clear impact levels. For example, establish a range from low (minimal, reversible impact) to extreme (substantial, long-lasting impact). Include specific criteria for each level to enable consistent evaluation.
-
Evaluate harm severity considering multiple factors. As an example, in medical AI systems, incorrect diagnoses might have major severity due to potential health impacts and difficulty in reversing treatment decisions. Consider immediate effects, long-term consequences and reversibility.
-
Document severity assessments with supporting evidence. For example, consider financial AI where incorrect investment advice might have a moderate or major severity estimate for impacted users, depending on the context. Include analysis of varying stakeholder impacts.
Resources
Related documents:
-
ISO/IEC 42001:2023
A.5.2 AI system impact assessment process
