Governance & Compliance · Software component
Risk Scorer
Software componentGovernance & ComplianceSafety, Security & GovernanceVariation point (abstract)arc:RiskScorer
An abstract governance component that assigns each identified AI risk a level by combining its estimated likelihood and potential impact, enabling prioritization.
Responsibility. Determines the risk level of each identified risk from likelihood and impact.
Also known as: Risk assessment, Risk rating
Variants
| Variant | When to choose |
|---|---|
| Qualitative Risk Matrix Scorer | Choose when likelihood and impact can only be judged in bands and qualitative judgment about context and acceptability matters more than numerical precision. |
| Quantitative Risk Scorer | Choose when numerical evidence is needed to track trends, compare mitigation alternatives and trigger action at defined thresholds, e.g., continuous re-scoring. |
Relationships
reads dependency
writes dependency
Design guidance
- SHOULD prioritize high-likelihood, catastrophic-impact risks for immediate, comprehensive controls.
- SHOULD draw on diverse team perspectives and multiple assessment methods.
Classification
- Patterns
- Likelihood x impact assessment
- Quality attributes
- Reliability (ISO/IEC 25010 | NIST AI RMF: valid and reliable)Functional suitability: correctness and validity (ISO/IEC 25010 | NIST AI RMF: valid)
- Risks mitigated
- Equal effort spent on every theoretical risk
- Frameworks & regulations
- NIST AI RMF: MEASUREISO/IEC 42001 §6 PlanningISO 31000
Sources
- Ch9.8: T. Nguyen, "Standards and Frameworks for AI Governance," in Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam, 1st ed. 2026, ch. 9.8. ISBN: 9798244538229.
- Ref9.07: "Risk Assessment and Management for AI Systems," unpublished reference note (references/Chapter 9 - Safety, Ethics, and Compliance/07-Risk-Assessment-Management.md), Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam supplementary materials, 2026. unpublished note