RAISP01-BP03 Check if design choices have introduced new risks
Review how design decisions affect the risk profile, determining whether additional assessment criteria must be incorporated into the testing framework.
For example, choosing to use a third-party component instead of building your own solution might introduce new risk considerations. When you identify new risks or changes in risk likelihood, decide if you need to update your release criteria to properly test for these issues before release.
Level of risk exposed if this best practice is not established: High
Implementation considerations
-
Review the AI system document, design decisions and tradeoffs for each component.
-
Determine if the design decisions result in new risks or updates to already identified risks in terms of severity and likelihood.
-
Update the risk assessment accordingly.
-
Review the release criteria and determine if the release criteria sufficiently covers the identified risks.
-
Update the release criteria accordingly.
Resources
Related documents:
