Accept the aggregate AI exposure position across the estate
Draft
Accept the aggregate AI exposure position across the estate
Layer 4. Control RSKRisk acceptance
Allocation
| L4-RSK-06 | |
|---|---|
| Decides | AI Governance Board |
| Consulted | Head of Risk, CISO, CFO and CAIO |
| Executes | Head of Risk |
| Evidence | Aggregate exposure assessment with the accepted position stated |
In plain terms
Accept what the systems amount to together. Forty individually acceptable systems are not automatically an acceptable estate.
What is being judged
Three exposures, none of which any per-system assessment can see.
Provider concentration. What share of production systems depend on one model provider, and what a deprecation, pricing change, safety intervention or extended outage would affect at once.
Correlated failure. Which systems consume the same data domain and would degrade together if it did. Each system’s fitness declaration is valid; the correlation appears in none of them.
Cumulative decisioning. Where several systems, each below materiality, make automated decisions about the same population. A person whose credit, service tier, support priority and eligibility are each set automatically is subject to a materially different regime than any single system implies.
Scope is specified and method is not, deliberately. Prescribing a method now would mean inventing one.
What this decision does not cover
It does not accept any individual system’s risk, and it does not set the sourcing posture, which is L6-04.
When it fires
On event. When provider concentration crosses the limit set at L6-04. When a new production system enters a data domain already feeding a stated number of systems. On a provider event affecting the estate.
On cycle. Per board reporting cycle.
What you need before deciding
The AI system register, reconciled. Provider dependency per system. Data domain consumption per system. Which populations are subject to more than one automated decision, which is the hardest of the three to assemble and the one most likely to be skipped.
How this goes wrong
Aggregate blindness: the assessment is never produced and the estate is assumed acceptable because its parts are. Concentration measured by spend: share of cost rather than share of systems, which understates a dependency on a cheap provider serving many systems. The assessment nobody accepts: produced, circulated, never signed, so no position exists.
Related decisions
Loop L6-04 sourcing posture. The assessment triggers posture revision; the posture sets the limit that triggers the assessment. Intentional.
Upstream the AI system register.
Downstream L6-01 strategy.
Instrument references
None. Every instrument in the crosswalk assesses AI systems individually. Crosswalk gap 7, and the second of AI9GM’s two substantive contributions.
Correction
The maintainer answers corrections. There is no service level. Responses are best-effort and opportunistic within a reasonable time: a correction raised on a Monday is answered that week or sooner.