AI That Works  ·  AI6 Guidance
AI6-T03.2
Register — Pillar 03
Enterprise AI Risk Register
Document No.AI6-T03.2Version[1.0]
Document Owner[Name / Role]Date[DD/MM/YYYY]
Review Date[DD/MM/YYYY]Status[ Draft / In Review / Approved ]
Organisation[Organisation Name]
Integrate this register with your existing enterprise risk register. Review all AI risks quarterly. Reassess likelihood and consequence ratings whenever a system's use case changes, a new AI system is deployed, or an incident occurs.
AI Risk Register
Risk IDAI SystemRisk CategoryRisk DescriptionLikelihood
(1–5)		Consequence
(1–5)		Rating
(L×C)		Treatment PlanRisk OwnerStatusNext Review
AIR-001[System name]Algorithmic drift[Description of the specific risk and how it could materialise]3412 — High[Describe mitigation: enhanced monitoring; threshold alerts; manual review trigger][Name][ Open / Mitigated / Accepted ][DD/MM/YYYY]
AIR-002[System name]Data privacy breach[Description]2510 — High[Mitigation plan][Name]Open[DD/MM/YYYY]
           
           

Risk categories include: Algorithmic drift; Data quality / poisoning; Cybersecurity / adversarial attack; Privacy breach; Vendor failure; Regulatory non-compliance; Reputational harm; Operational failure; Bias / discrimination.

AI That Works  ·  AI6 Guidance — Compliance App  ·  aithatworks.com.au  ·  James Clements, AI Strategy & Governance Consultant

This template is provided as guidance only. It does not constitute legal advice. Customise for your organisation and seek qualified legal review where required.