{"attribution":{"source":"MIT AI Risk Repository, Domain Taxonomy of AI Risks v1 (MIT AI Risk Initiative)","license":"CC BY 4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","citation":"Slattery, P., Saeri, A. K., Grundy, E. A. C., Graham, J., Noetel, M., Uuk, R., Dao, J., Pour, S., Casper, S., & Thompson, N. (2025). The AI Risk Repository: A comprehensive meta-review, database, and taxonomy of risks from artificial intelligence. arXiv:2408.12622."},"exported_at":"2026-09-11"}
{"rows":[{"ev_id":"65.01.00","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Category","risk_category":"Training Data Risks (Transparency) ","risk_subcategory":"-","description":null,"entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.01.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Training Data Risks (Transparency) ","risk_subcategory":"Lack of training data transparency ","description":"\"Without accurate documentation on how a model's data was collected, curated, and used to train a model, it might be harder to satisfactorily explain the behavior of the model with respect to the data.\"","entity":"Human","intent":"Unintentional","timing":"Pre-deployment","domain":6,"subdomain":"6.5"},{"ev_id":"65.01.01a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Training Data Risks (Transparency) ","risk_subcategory":"Lack of training data transparency ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.01.02","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Training Data Risks (Transparency) ","risk_subcategory":"Uncertain data provenance ","description":"\"Data provenance refers to tracing history of data, which includes its ownership, origin, and transformations. Without standardized and established methods for verifying where the data came from, there are no guarantees that the data is the same as the original source and has the correct usage terms.\"","entity":"Human","intent":"Other","timing":"Pre-deployment","domain":6,"subdomain":"6.5"},{"ev_id":"65.01.02a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Training Data Risks (Transparency) ","risk_subcategory":"Uncertain data provenance ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.02.00","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Category","risk_category":"Training Data Risks (Data laws) ","risk_subcategory":"-","description":null,"entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.02.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Training Data Risks (Data laws) ","risk_subcategory":"Data usage restrictions ","description":"\"Laws and other restrictions can limit or prohibit the use of some data for specific AI use cases.\"","entity":"Human","intent":"Unintentional","timing":"Pre-deployment","domain":7,"subdomain":"7.3"},{"ev_id":"65.02.01a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Training Data Risks (Data laws) ","risk_subcategory":"Data usage restrictions ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.02.02","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Training Data Risks (Data laws) ","risk_subcategory":"Data acquisition restrictions ","description":"\"Laws and other regulations might limit the collection of certain types of data for specific AI use cases.\"","entity":"Human","intent":"Unintentional","timing":"Pre-deployment","domain":7,"subdomain":"7.3"},{"ev_id":"65.02.02a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Training Data Risks (Data laws) ","risk_subcategory":"Data acquisition restrictions ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.02.03","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Training Data Risks (Data laws) ","risk_subcategory":"Data transfer restrictions ","description":"\"Laws and other restrictions can limit or prohibit transferring data.\"","entity":"Human","intent":"Unintentional","timing":"Pre-deployment","domain":7,"subdomain":"7.3"},{"ev_id":"65.02.03a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Training Data Risks (Data laws) ","risk_subcategory":"Data transfer restrictions ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.03.00","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Category","risk_category":"Training Data Risks (Privacy) ","risk_subcategory":"-","description":null,"entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.03.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Training Data Risks (Privacy) ","risk_subcategory":"Personal information in data ","description":"\"Inclusion or presence of personal identifiable information (PII) and sensitive personal information (SPI) in the data used for training or fine tuning the model might result in unwanted disclosure of that information.\"","entity":"AI","intent":"Unintentional","timing":"Post-deployment","domain":2,"subdomain":"2.1"},{"ev_id":"65.03.01a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Training Data Risks (Privacy) ","risk_subcategory":"Personal information in data ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.03.02","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Training Data Risks (Privacy) ","risk_subcategory":"Data privacy rights alignment","description":"\"Existing laws could include providing data subject rights such as opt-out, right to access, and right to be forgotten.\"","entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.03.02a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Training Data Risks (Privacy) ","risk_subcategory":"Data privacy rights alignment","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.03.03","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Training Data Risks (Privacy) ","risk_subcategory":"Reidentification ","description":"\"Even with the removal or personal identifiable information (PII) and sensitive personal information (SPI) from data, it might be possible to identify persons due to correlations to other features available in the data.\"","entity":"Other","intent":"Unintentional","timing":"Pre-deployment","domain":2,"subdomain":"2.1"},{"ev_id":"65.03.03a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Training Data Risks (Privacy) ","risk_subcategory":"Reidentification ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.04.00","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Category","risk_category":"Training Data Risks (Fairness) ","risk_subcategory":"-","description":null,"entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.04.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Training Data Risks (Fairness) ","risk_subcategory":"Data bias","description":"\"Historical and societal biases that are present in the data are used to train and fine-tune the model.\"","entity":"Human","intent":"Unintentional","timing":"Post-deployment","domain":1,"subdomain":"1.1"},{"ev_id":"65.04.01a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Training Data Risks (Fairness) ","risk_subcategory":"Data bias","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.05.00","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Category","risk_category":"Training Data Risks (Intellectual property) ","risk_subcategory":"-","description":null,"entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.05.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Training Data Risks (Intellectual property) ","risk_subcategory":"Data usage rights restrictions ","description":"\"Terms of service, license compliance, or other IP issues may restrict the ability to use certain data for building models.\"","entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.05.01a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Training Data Risks (Intellectual property) ","risk_subcategory":"Data usage rights restrictions ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.05.02","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Training Data Risks (Intellectual property) ","risk_subcategory":"Confidential information in data ","description":"\"Confidential information might be included as part of the data that is used to train or tune the model.\"","entity":"Human","intent":"Unintentional","timing":"Pre-deployment","domain":2,"subdomain":"2.1"},{"ev_id":"65.05.02a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Training Data Risks (Intellectual property) ","risk_subcategory":"Confidential information in data ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.06.00","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Category","risk_category":"Training Data Risks (Accuracy) ","risk_subcategory":"-","description":null,"entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.06.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Training Data Risks (Accuracy) ","risk_subcategory":"Data contamination ","description":"\"Data contamination occurs when incorrect data is used for training. For example, data that is not aligned with model’s purpose or data that is already set aside for other development tasks such as testing and evaluation.\"","entity":"Human","intent":"Unintentional","timing":"Pre-deployment","domain":7,"subdomain":"7.3"},{"ev_id":"65.06.01a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Training Data Risks (Accuracy) ","risk_subcategory":"Data contamination ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.06.02","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Training Data Risks (Accuracy) ","risk_subcategory":"Unrepresentative data ","description":"\"Unrepresentative data occurs when the training or fine-tuning data is not sufficiently representative of the underlying population or does not measure the phenomenon of interest.\"","entity":"Other","intent":"Unintentional","timing":"Pre-deployment","domain":7,"subdomain":"7.3"},{"ev_id":"65.06.02a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Training Data Risks (Accuracy) ","risk_subcategory":"Unrepresentative data ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.07.00","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Category","risk_category":"Training Data Risks (Value alignment) ","risk_subcategory":"-","description":null,"entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.07.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Training Data Risks (Value alignment) ","risk_subcategory":"Improper retraining ","description":"\"Using undesirable output (for example, inaccurate, inappropriate, and user content) for retraining purposes can result in unexpected model behavior.\"","entity":"Human","intent":"Unintentional","timing":"Post-deployment","domain":7,"subdomain":"7.3"},{"ev_id":"65.07.01a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Training Data Risks (Value alignment) ","risk_subcategory":"Improper retraining ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.07.02","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Training Data Risks (Value alignment) ","risk_subcategory":"Improper data curation ","description":"\"Improper collection and preparation of training or tuning data includes data label errors and by using data with conflicting information or misinformation.\"","entity":"Human","intent":"Unintentional","timing":"Pre-deployment","domain":7,"subdomain":"7.3"},{"ev_id":"65.07.02a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Training Data Risks (Value alignment) ","risk_subcategory":"Improper data curation ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.08.00","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Category","risk_category":"Training Data Risks (Robustness) ","risk_subcategory":"-","description":null,"entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.08.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Training Data Risks (Robustness) ","risk_subcategory":"Data poisoning ","description":"\"A type of adversarial attack where an adversary or malicious insider injects intentionally corrupted, false, misleading, or incorrect samples into the training or fine-tuning datasets.\"","entity":"Human","intent":"Intentional","timing":"Pre-deployment","domain":2,"subdomain":"2.2"},{"ev_id":"65.08.01a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Training Data Risks (Robustness) ","risk_subcategory":"Data poisoning ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.09.00","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Category","risk_category":"Inference risks (Robustness) ","risk_subcategory":"-","description":null,"entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.09.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Inference risks (Robustness) ","risk_subcategory":"Prompt injection attack ","description":"\"A prompt injection attack forces a generative model that takes a prompt as input to produce unexpected output by manipulating the structure, instructions, or information contained in its prompt.\"","entity":"Human","intent":"Intentional","timing":"Post-deployment","domain":2,"subdomain":"2.2"},{"ev_id":"65.09.01a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Inference risks (Robustness) ","risk_subcategory":"Prompt injection attack ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.09.02","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Inference risks (Robustness) ","risk_subcategory":"Extraction attack ","description":"\"An attribute inference attack is used to detect whether certain sensitive features can be inferred about individuals who participated in training a model. These attacks occur when an adversary has some prior knowledge about the training data and uses that knowledge to infer the sensitive data.\"","entity":"Human","intent":"Intentional","timing":"Post-deployment","domain":2,"subdomain":"2.2"},{"ev_id":"65.09.02a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Inference risks (Robustness) ","risk_subcategory":"Extraction attack ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.09.03","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Inference risks (Robustness) ","risk_subcategory":"Evasion attack ","description":"\"Evasion attacks attempt to make a model output incorrect results by slightly perturbing the input data that is sent to the trained model.\"","entity":"Human","intent":"Intentional","timing":"Post-deployment","domain":2,"subdomain":"2.2"},{"ev_id":"65.09.03a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Inference risks (Robustness) ","risk_subcategory":"Evasion attack ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.09.04","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Inference risks (Robustness) ","risk_subcategory":"Prompt leaking ","description":"\"A prompt leak attack attempts to extract a model's system prompt (also known as the system message).\"","entity":"Human","intent":"Intentional","timing":"Other","domain":2,"subdomain":"2.2"},{"ev_id":"65.09.04a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Inference risks (Robustness) ","risk_subcategory":"Prompt leaking ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.10.00","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Category","risk_category":"Inference risks (Multi-category) ","risk_subcategory":"-","description":null,"entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.10.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Inference risks (Multi-category) ","risk_subcategory":"Jailbreaking ","description":"\"A jailbreaking attack attempts to break through the guardrails that are established in the model to perform restricted actions.\"","entity":"Human","intent":"Intentional","timing":"Post-deployment","domain":2,"subdomain":"2.2"},{"ev_id":"65.10.01a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Inference risks (Multi-category) ","risk_subcategory":"Jailbreaking ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.10.02","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Inference risks (Multi-category) ","risk_subcategory":"Prompt priming ","description":"\"Because generative models tend to produce output like the input provided, the model can be prompted to reveal specific kinds of information. For example, adding personal information in the prompt increases its likelihood of generating similar kinds of personal information in its output. If personal data was included as part of the model’s training, there is a possibility it could be revealed.\"","entity":"Human","intent":"Intentional","timing":"Post-deployment","domain":2,"subdomain":"2.2"},{"ev_id":"65.10.02a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Inference risks (Multi-category) ","risk_subcategory":"Prompt priming ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.11.00","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Category","risk_category":"Inference risks (Privacy) ","risk_subcategory":"-","description":null,"entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.11.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Inference risks (Privacy) ","risk_subcategory":"Membership inference attack ","description":"\"A membership inference attack repeatedly queries a model to determine whether a given input was part of the model’s training. More specifically, given a trained model and a data sample, an attacker samples the input space, observing outputs to deduce whether that sample was part of the model's training.\"","entity":"Human","intent":"Intentional","timing":"Post-deployment","domain":2,"subdomain":"2.2"},{"ev_id":"65.11.01a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Inference risks (Privacy) ","risk_subcategory":"Membership inference attack ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.11.02","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Inference risks (Privacy) ","risk_subcategory":"Attribute inference attack ","description":"\"An attribute inference attack repeatedly queries a model to detect whether certain sensitive features can be inferred about individuals who participated in training a model. These attacks occur when an adversary has some prior knowledge about the training data and uses that knowledge to infer the sensitive data.\"","entity":"Human","intent":"Intentional","timing":"Post-deployment","domain":2,"subdomain":"2.2"},{"ev_id":"65.11.02a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Inference risks (Privacy) ","risk_subcategory":"Attribute inference attack ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.11.03","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Inference risks (Privacy) ","risk_subcategory":"Personal information in prompt ","description":"\"Personal information or sensitive personal information that is included as a part of a prompt that is sent to the model.\"","entity":"AI","intent":"Unintentional","timing":"Post-deployment","domain":2,"subdomain":"2.1"},{"ev_id":"65.11.03a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Inference risks (Privacy) ","risk_subcategory":"Personal information in prompt ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.12.00","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Category","risk_category":"Inference risks (Intellectual property) ","risk_subcategory":"-","description":null,"entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.12.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Inference risks (Intellectual property) ","risk_subcategory":"Confidential data in prompt ","description":"\"Confidential information might be included as a part of the prompt that is sent to the model.\"","entity":"Other","intent":"Unintentional","timing":"Post-deployment","domain":2,"subdomain":"2.1"},{"ev_id":"65.12.01a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Inference risks (Intellectual property) ","risk_subcategory":"Confidential data in prompt ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.12.02","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Inference risks (Intellectual property) ","risk_subcategory":"IP information in prompt ","description":"\"Copyrighted information or other intellectual property might be included as a part of the prompt that is sent to the model.\"","entity":"Other","intent":"Unintentional","timing":"Post-deployment","domain":2,"subdomain":"2.1"},{"ev_id":"65.12.02a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Inference risks (Intellectual property) ","risk_subcategory":"IP information in prompt ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.13.00","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Category","risk_category":"Inference risks (Accuracy) ","risk_subcategory":"-","description":null,"entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.13.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Inference risks (Accuracy) ","risk_subcategory":"Poor model accuracy ","description":"\"Poor model accuracy occurs when a model’s performance is insufficient to the task it was designed for. Low accuracy might occur if the model is not correctly engineered, or there are changes to the model’s expected inputs.\"","entity":"Human","intent":"Unintentional","timing":"Post-deployment","domain":7,"subdomain":"7.3"},{"ev_id":"65.13.01a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Inference risks (Accuracy) ","risk_subcategory":"Poor model accuracy ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.14.00","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Category","risk_category":"Output risks (misuse) ","risk_subcategory":"-","description":null,"entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.14.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Output risks (misuse) ","risk_subcategory":"Non-disclosure ","description":"\"Content might not be clearly disclosed as AI generated.\"","entity":"Human","intent":"Other","timing":"Post-deployment","domain":7,"subdomain":"7.4"},{"ev_id":"65.14.01a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Output risks (misuse) ","risk_subcategory":"Non-disclosure ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.14.02","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Output risks (misuse) ","risk_subcategory":"Improper usage ","description":"\"Improper usage occurs when a model is used for a purpose that it was not originally designed for.\"","entity":"Human","intent":"Unintentional","timing":"Post-deployment","domain":5,"subdomain":"5.1"},{"ev_id":"65.14.02a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Output risks (misuse) ","risk_subcategory":"Improper usage ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.14.03","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Output risks (misuse) ","risk_subcategory":"Spreading toxicity","description":"\"Generative AI models might be used intentionally to generate hateful, abusive, and profane (HAP) or obscene content.\"","entity":"Human","intent":"Intentional","timing":"Post-deployment","domain":4,"subdomain":"4.0"},{"ev_id":"65.14.03a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Output risks (misuse) ","risk_subcategory":"Spreading toxicity","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.14.04","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Output risks (misuse) ","risk_subcategory":"Dangerous use","description":"\"Generative AI models might be used with the sole intention of harming people.\"","entity":"Human","intent":"Intentional","timing":"Post-deployment","domain":4,"subdomain":"4.0"},{"ev_id":"65.14.04a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Output risks (misuse) ","risk_subcategory":"Dangerous use","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.14.05","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Output risks (misuse) ","risk_subcategory":"Nonconsensual use","description":"\"Generative AI models might be intentionally used to imitate people through deepfakes by using video, images, audio, or other modalities without their consent.\"","entity":"Human","intent":"Intentional","timing":"Post-deployment","domain":4,"subdomain":"4.3"},{"ev_id":"65.14.05a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Output risks (misuse) ","risk_subcategory":"Nonconsensual use","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.14.06","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Output risks (misuse) ","risk_subcategory":"Spreading disinformation ","description":"\"Generative AI models might be used to intentionally create misleading or false information to deceive or influence a targeted audience.\"","entity":"Human","intent":"Intentional","timing":"Post-deployment","domain":4,"subdomain":"4.1"},{"ev_id":"65.14.06a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Output risks (misuse) ","risk_subcategory":"Spreading disinformation ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.15.00","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Category","risk_category":"Output risks (Value alignment)","risk_subcategory":"-","description":null,"entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.15.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Output risks (Value alignment)","risk_subcategory":"Incomplete advice ","description":"\"When a model provides advice without having enough information, resulting in possible harm if the advice is followed.\"","entity":"AI","intent":"Unintentional","timing":"Post-deployment","domain":7,"subdomain":"7.3"},{"ev_id":"65.15.01a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Output risks (Value alignment)","risk_subcategory":"Incomplete advice ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.15.02","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Output risks (Value alignment)","risk_subcategory":"Harmful code generation ","description":"\"Models might generate code that causes harm or unintentionally affects other systems.\"","entity":"AI","intent":"Unintentional","timing":"Post-deployment","domain":2,"subdomain":"2.2"},{"ev_id":"65.15.02a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Output risks (Value alignment)","risk_subcategory":"Harmful code generation ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.15.03","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Output risks (Value alignment)","risk_subcategory":"Over- or under-reliance ","description":"\"In AI-assisted decision-making tasks, reliance measures how much a person trusts (and potentially acts on) a model’s output. Over-reliance occurs when a person puts too much trust in a model, accepting a model’s output when the model’s output is likely incorrect. Under-reliance is the opposite, where the person doesn’t trust the model but should.\"","entity":"Human","intent":"Unintentional","timing":"Post-deployment","domain":5,"subdomain":"5.1"},{"ev_id":"65.15.03a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Output risks (Value alignment)","risk_subcategory":"Over- or under-reliance ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.15.04","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Output risks (Value alignment)","risk_subcategory":"Toxic output ","description":"\"Toxic output occurs when the model produces hateful, abusive, and profane (HAP) or obscene content. This also includes behaviors like bullying.\"","entity":"AI","intent":"Other","timing":"Post-deployment","domain":1,"subdomain":"1.2"},{"ev_id":"65.15.04a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Output risks (Value alignment)","risk_subcategory":"Toxic output ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.15.05","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Output risks (Value alignment)","risk_subcategory":"Harmful output ","description":"\"A model might generate language that leads to physical harm The language might include overtly violent, covertly dangerous, or otherwise indirectly unsafe statements.\"","entity":"AI","intent":"Unintentional","timing":"Post-deployment","domain":1,"subdomain":"1.2"},{"ev_id":"65.15.05a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Output risks (Value alignment)","risk_subcategory":"Harmful output ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.16.00","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Category","risk_category":"Output risks (Intellectual Property) ","risk_subcategory":"-","description":null,"entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.16.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Output risks (Intellectual Property) ","risk_subcategory":"Copyright infringement ","description":"\"A model might generate content that is similar or identical to existing work protected by copyright or covered by open-source license agreement.\"","entity":"AI","intent":"Other","timing":"Post-deployment","domain":6,"subdomain":"6.3"},{"ev_id":"65.16.01a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Output risks (Intellectual Property) ","risk_subcategory":"Copyright infringement ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.16.02","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Output risks (Intellectual Property) ","risk_subcategory":"Revealing confidential information ","description":"\"When confidential information is used in training data, fine-tuning data, or as part of the prompt, models might reveal that data in the generated output. Revealing confidential information is a type of data leakage.\"","entity":"AI","intent":"Unintentional","timing":"Post-deployment","domain":2,"subdomain":"2.1"},{"ev_id":"65.16.02a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Output risks (Intellectual Property) ","risk_subcategory":"Revealing confidential information ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.17.00","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Category","risk_category":"Output risks (Explainability) ","risk_subcategory":"-","description":null,"entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.17.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Output risks (Explainability) ","risk_subcategory":"Inaccessible training data ","description":"\"Without access to the training data, the types of explanations a model can provide are limited and more likely to be incorrect.\"","entity":"AI","intent":"Unintentional","timing":"Post-deployment","domain":7,"subdomain":"7.4"},{"ev_id":"65.17.01a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Output risks (Explainability) ","risk_subcategory":"Inaccessible training data ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.17.02","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Output risks (Explainability) ","risk_subcategory":"Untraceable attribution ","description":"\"The content of the training data used for generating the model’s output is not accessible.\"","entity":"Other","intent":"Other","timing":"Post-deployment","domain":7,"subdomain":"7.4"},{"ev_id":"65.17.02a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Output risks (Explainability) ","risk_subcategory":"Untraceable attribution ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.17.03","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Output risks (Explainability) ","risk_subcategory":"Unexplainable output ","description":"\"Explanations for model output decisions might be difficult, imprecise, or not possible to obtain.\"","entity":"AI","intent":"Unintentional","timing":"Post-deployment","domain":7,"subdomain":"7.4"},{"ev_id":"65.17.03a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Output risks (Explainability) ","risk_subcategory":"Unexplainable output ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.17.04","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Output risks (Explainability) ","risk_subcategory":"Unreliable source attribution ","description":"\"Source attribution is the AI system's ability to describe from what training data it generated a portion or all its output. Since current techniques are based on approximations, these attributions might be incorrect.\"","entity":"AI","intent":"Unintentional","timing":"Post-deployment","domain":7,"subdomain":"7.4"},{"ev_id":"65.17.04a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Output risks (Explainability) ","risk_subcategory":"Unreliable source attribution ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.18.00","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Category","risk_category":"Output risks (Robustness) ","risk_subcategory":"-","description":null,"entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.18.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Output risks (Robustness) ","risk_subcategory":"Hallucination ","description":"\"Hallucinations generate factually inaccurate or untruthful content with respect to the model’s training data or input. This is also sometimes referred to lack of faithfulness or lack of groundedness.\"","entity":"AI","intent":"Unintentional","timing":"Post-deployment","domain":3,"subdomain":"3.1"},{"ev_id":"65.18.01a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Output risks (Robustness) ","risk_subcategory":"Hallucination ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.19.00","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Category","risk_category":"Output risks (Fairness)","risk_subcategory":"-","description":null,"entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.19.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Output risks (Fairness)","risk_subcategory":"Output bias ","description":"\"Generated content might unfairly represent certain groups or individuals.\"","entity":"AI","intent":"Unintentional","timing":"Post-deployment","domain":1,"subdomain":"1.1"},{"ev_id":"65.19.01a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Output risks (Fairness)","risk_subcategory":"Output bias ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.19.02","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Output risks (Fairness)","risk_subcategory":"Decision bias ","description":"\"Decision bias occurs when one group is unfairly advantaged over another due to decisions of the model. This might be caused by biases in the data and also amplified as a result of the model’s training.\"","entity":"AI","intent":"Unintentional","timing":"Pre-deployment","domain":1,"subdomain":"1.1"},{"ev_id":"65.19.02a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Output risks (Fairness)","risk_subcategory":"Decision bias ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.20.00","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Category","risk_category":"Output risks (Privacy)","risk_subcategory":"-","description":null,"entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.20.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Output risks (Privacy)","risk_subcategory":"Exposing personal information ","description":"\"When personal identifiable information (PII) or sensitive personal information (SPI) are used in training data, fine-tuning data, or as part of the prompt, models might reveal that data in the generated output. Revealing personal information is a type of data leakage.\"","entity":"AI","intent":"Unintentional","timing":"Post-deployment","domain":2,"subdomain":"2.1"},{"ev_id":"65.20.01a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Output risks (Privacy)","risk_subcategory":"Exposing personal information ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.21.00","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Category","risk_category":"Non-technical risks (legal compliance)","risk_subcategory":"-","description":null,"entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.21.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (legal compliance)","risk_subcategory":"Model usage rights restrictions ","description":"\"Terms of service, licenses, or other rules restrict the use of certain models.\"","entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.21.01a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Non-technical risks (legal compliance)","risk_subcategory":"Model usage rights restrictions ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.21.02","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (legal compliance)","risk_subcategory":"Legal accountability ","description":"\"Determining who is responsible for an AI model is challenging without good documentation and governance processes.\"","entity":"Other","intent":"Other","timing":"Other","domain":6,"subdomain":"6.5"},{"ev_id":"65.21.02a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Non-technical risks (legal compliance)","risk_subcategory":"Legal accountability ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.21.03","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (legal compliance)","risk_subcategory":"Generated content ownership and IP","description":"\"Legal uncertainty about the ownership and intellectual property rights of AI-generated content.\"","entity":"Other","intent":"Other","timing":"Other","domain":6,"subdomain":"6.3"},{"ev_id":"65.21.03a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Non-technical risks (legal compliance)","risk_subcategory":"Generated content ownership and IP","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.22.00","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Category","risk_category":"Non-technical risks (Governance)","risk_subcategory":"-","description":null,"entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.22.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (Governance)","risk_subcategory":"Lack of system transparency ","description":"\"Insufficient documentation of the system that uses the model and the model’s purpose within the system in which it is used.\"","entity":"Human","intent":"Other","timing":"Other","domain":6,"subdomain":"6.5"},{"ev_id":"65.22.01a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Non-technical risks (Governance)","risk_subcategory":"Lack of system transparency ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.22.02","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (Governance)","risk_subcategory":"Unrepresentative risk testing ","description":"\"Testing is unrepresentative when the test inputs are mismatched with the inputs that are expected during deployment.\"","entity":"Human","intent":"Unintentional","timing":"Pre-deployment","domain":6,"subdomain":"6.5"},{"ev_id":"65.22.02a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Non-technical risks (Governance)","risk_subcategory":"Unrepresentative risk testing ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.22.03","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (Governance)","risk_subcategory":"Incomplete usage definition ","description":"\"Since foundation models can be used for many purposes, a model’s intended use is important for defining the relevant risks of that model. As the use changes, the relevant risks might correspondingly change.\"","entity":"Human","intent":"Unintentional","timing":"Pre-deployment","domain":6,"subdomain":"6.5"},{"ev_id":"65.22.03a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Non-technical risks (Governance)","risk_subcategory":"Incomplete usage definition ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.22.04","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (Governance)","risk_subcategory":"Lack of data transparency ","description":"\"Lack of data transparency is due to insufficient documentation of training or tuning dataset details. \"","entity":"Human","intent":"Unintentional","timing":"Pre-deployment","domain":6,"subdomain":"6.5"},{"ev_id":"65.22.04a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Non-technical risks (Governance)","risk_subcategory":"Lack of data transparency ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.22.05","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (Governance)","risk_subcategory":"Incorrect risk testing ","description":"\"A metric selected to measure or track a risk is incorrectly selected, incompletely measuring the risk, or measuring the wrong risk for the given context.\"","entity":"Human","intent":"Unintentional","timing":"Post-deployment","domain":6,"subdomain":"6.5"},{"ev_id":"65.22.05a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Non-technical risks (Governance)","risk_subcategory":"Incorrect risk testing ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.22.06","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (Governance)","risk_subcategory":"Lack of model transparency ","description":"\"Lack of model transparency is due to insufficient documentation of the model design, development, and evaluation process and the absence of insights into the inner workings of the model.\"","entity":"Human","intent":"Unintentional","timing":"Other","domain":7,"subdomain":"7.4"},{"ev_id":"65.22.06a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Non-technical risks (Governance)","risk_subcategory":"Lack of model transparency ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.22.07","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (Governance)","risk_subcategory":"Lack of testing diversity ","description":"\"AI model risks are socio-technical, so their testing needs input from a broad set of disciplines and diverse testing practices.\"","entity":"Human","intent":"Unintentional","timing":"Pre-deployment","domain":6,"subdomain":"6.5"},{"ev_id":"65.22.07a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Non-technical risks (Governance)","risk_subcategory":"Lack of testing diversity ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.23.00","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Category","risk_category":"Non-technical risks (Societal impact)","risk_subcategory":"-","description":null,"entity":"Not coded","intent":"Not coded","timing":"Not coded","domain":null,"subdomain":null},{"ev_id":"65.23.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (Societal impact)","risk_subcategory":"Impact on cultural diversity ","description":"\"AI systems might overly represent certain cultures that result in a homogenization of culture and thoughts.\"","entity":"AI","intent":"Unintentional","timing":"Post-deployment","domain":6,"subdomain":"6.3"},{"ev_id":"65.23.01a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Non-technical risks (Societal impact)","risk_subcategory":"Impact on cultural diversity ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.23.02","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (Societal impact)","risk_subcategory":"Impact on education: plagiarism ","description":"\"Easy access to high-quality generative models might result in students that use AI models to plagiarize existing work intentionally or unintentionally.\"","entity":"Human","intent":"Other","timing":"Post-deployment","domain":4,"subdomain":"4.3"},{"ev_id":"65.23.02a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Non-technical risks (Societal impact)","risk_subcategory":"Impact on education: plagiarism ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.23.03","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (Societal impact)","risk_subcategory":"Impact on Jobs ","description":"\"Widespread adoption of foundation model-based AI systems might lead to people's job loss as their work is automated if they are not reskilled.\"","entity":"Human","intent":"Unintentional","timing":"Post-deployment","domain":6,"subdomain":"6.2"},{"ev_id":"65.23.03a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Non-technical risks (Societal impact)","risk_subcategory":"Impact on Jobs ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.23.04","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (Societal impact)","risk_subcategory":"Impact on affected communities ","description":"\"It is important to include the perspectives or concerns of communities that are affected by model outcomes when designing and building models. Failing to include these perspectives makes it difficult to understand the relevant context for the model and to engender trust within these communities.\"","entity":"Human","intent":"Unintentional","timing":"Post-deployment","domain":1,"subdomain":"1.3"},{"ev_id":"65.23.04a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Non-technical risks (Societal impact)","risk_subcategory":"Impact on affected communities ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.23.05","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (Societal impact)","risk_subcategory":"Impact on education: bypassing learning ","description":"\"Easy access to high-quality generative models might result in students that use AI models to bypass the learning process.\"","entity":"Human","intent":"Intentional","timing":"Post-deployment","domain":4,"subdomain":"4.3"},{"ev_id":"65.23.05a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Non-technical risks (Societal impact)","risk_subcategory":"Impact on education: bypassing learning ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.23.06","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (Societal impact)","risk_subcategory":"Impact on the environment ","description":"\"AI, and large generative models in particular, might produce increased carbon emissions and increase water usage for their training and operation.\"","entity":"AI","intent":"Other","timing":"Post-deployment","domain":6,"subdomain":"6.6"},{"ev_id":"65.23.06a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Non-technical risks (Societal impact)","risk_subcategory":"Impact on the environment ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.23.07","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (Societal impact)","risk_subcategory":"Human exploitation ","description":"\"When workers who train AI models such as ghost workers are not provided with adequate working conditions, fair compensation, and good health care benefits that also include mental health.\"","entity":"Human","intent":"Other","timing":"Pre-deployment","domain":6,"subdomain":"6.2"},{"ev_id":"65.23.07a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Non-technical risks (Societal impact)","risk_subcategory":"Human exploitation ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null},{"ev_id":"65.23.08","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (Societal impact)","risk_subcategory":"Impact on human agency ","description":"\"AI might affect the individuals’ ability to make choices and act independently in their best interests.\"","entity":"AI","intent":"Unintentional","timing":"Post-deployment","domain":5,"subdomain":"5.2"},{"ev_id":"65.23.08a","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Additional evidence","risk_category":"Non-technical risks (Societal impact)","risk_subcategory":"Impact on human agency ","description":null,"entity":null,"intent":null,"timing":null,"domain":null,"subdomain":null}]}