manage — Manage
13 actions in the Manage function
MANAGE-1.1A determination is made as to whether the AI system achieves its intended purpose and stated objectives and whether its development or deployment should proceed.
MANAGE-1.2Treatment of documented AI risks is prioritized based on impact, likelihood, or available resources or methods.
MANAGE-1.3Responses to the AI risks deemed high priority as identified by the Map function, are developed, planned, and documented. Risk response options can include mitigating, transferring, avoiding, or accepting.
MANAGE-1.4Negative residual risks (defined as the sum of all unmitigated risks) to both downstream acquirers of AI systems and end users are documented.
MANAGE-2.1Resources required to manage AI risks are taken into account, along with viable non-AI alternative systems, approaches, or methods – to reduce the magnitude or likelihood of potential impacts.
MANAGE-2.2Mechanisms are in place and applied to sustain the value of deployed AI systems.
MANAGE-2.3Procedures are followed to respond to and recover from a previously unknown risk when it is identified.
MANAGE-2.4Mechanisms are in place and applied, responsibilities are assigned and understood to supersede, disengage, or deactivate AI systems that demonstrate performance or outcomes inconsistent with intended use.
MANAGE-3.1AI risks and benefits from third-party resources are regularly monitored, and risk controls are applied and documented.
MANAGE-3.2Pre-trained models which are used for development are monitored as part of AI system regular monitoring and maintenance.
MANAGE-4.1Post-deployment AI system monitoring plans are implemented, including mechanisms for capturing and evaluating input from users and other relevant AI actors, appeal and override, decommissioning, incident response, recovery, and change management.
MANAGE-4.2Measurable activities for continual improvements are integrated into AI system updates and include regular engagement with interested parties, including relevant AI actors.
MANAGE-4.3Incidents and errors are communicated to relevant AI actors including affected communities. Processes for tracking, responding to, and recovering from incidents and errors are followed and documented.