{"attribution":{"source":"MIT AI Risk Repository, Domain Taxonomy of AI Risks v1 (MIT AI Risk Initiative)","license":"CC BY 4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","citation":"Slattery, P., Saeri, A. K., Grundy, E. A. C., Graham, J., Noetel, M., Uuk, R., Dao, J., Pour, S., Casper, S., & Thompson, N. (2025). The AI Risk Repository: A comprehensive meta-review, database, and taxonomy of risks from artificial intelligence. arXiv:2408.12622."},"exported_at":"2026-09-11"}
{"rows":[{"ev_id":"65.01.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Training Data Risks (Transparency) ","risk_subcategory":"Lack of training data transparency ","description":"\"Without accurate documentation on how a model's data was collected, curated, and used to train a model, it might be harder to satisfactorily explain the behavior of the model with respect to the data.\"","entity":"Human","intent":"Unintentional","timing":"Pre-deployment","domain":6,"subdomain":"6.5"},{"ev_id":"65.01.02","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Training Data Risks (Transparency) ","risk_subcategory":"Uncertain data provenance ","description":"\"Data provenance refers to tracing history of data, which includes its ownership, origin, and transformations. Without standardized and established methods for verifying where the data came from, there are no guarantees that the data is the same as the original source and has the correct usage terms.\"","entity":"Human","intent":"Other","timing":"Pre-deployment","domain":6,"subdomain":"6.5"},{"ev_id":"65.21.02","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (legal compliance)","risk_subcategory":"Legal accountability ","description":"\"Determining who is responsible for an AI model is challenging without good documentation and governance processes.\"","entity":"Other","intent":"Other","timing":"Other","domain":6,"subdomain":"6.5"},{"ev_id":"65.22.01","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (Governance)","risk_subcategory":"Lack of system transparency ","description":"\"Insufficient documentation of the system that uses the model and the model’s purpose within the system in which it is used.\"","entity":"Human","intent":"Other","timing":"Other","domain":6,"subdomain":"6.5"},{"ev_id":"65.22.02","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (Governance)","risk_subcategory":"Unrepresentative risk testing ","description":"\"Testing is unrepresentative when the test inputs are mismatched with the inputs that are expected during deployment.\"","entity":"Human","intent":"Unintentional","timing":"Pre-deployment","domain":6,"subdomain":"6.5"},{"ev_id":"65.22.03","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (Governance)","risk_subcategory":"Incomplete usage definition ","description":"\"Since foundation models can be used for many purposes, a model’s intended use is important for defining the relevant risks of that model. As the use changes, the relevant risks might correspondingly change.\"","entity":"Human","intent":"Unintentional","timing":"Pre-deployment","domain":6,"subdomain":"6.5"},{"ev_id":"65.22.04","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (Governance)","risk_subcategory":"Lack of data transparency ","description":"\"Lack of data transparency is due to insufficient documentation of training or tuning dataset details. \"","entity":"Human","intent":"Unintentional","timing":"Pre-deployment","domain":6,"subdomain":"6.5"},{"ev_id":"65.22.05","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (Governance)","risk_subcategory":"Incorrect risk testing ","description":"\"A metric selected to measure or track a risk is incorrectly selected, incompletely measuring the risk, or measuring the wrong risk for the given context.\"","entity":"Human","intent":"Unintentional","timing":"Post-deployment","domain":6,"subdomain":"6.5"},{"ev_id":"65.22.07","quick_ref":"IBM2025","paper_title":"AI Risk Atlas ","level":"Risk Sub-Category","risk_category":"Non-technical risks (Governance)","risk_subcategory":"Lack of testing diversity ","description":"\"AI model risks are socio-technical, so their testing needs input from a broad set of disciplines and diverse testing practices.\"","entity":"Human","intent":"Unintentional","timing":"Pre-deployment","domain":6,"subdomain":"6.5"}]}