Docs
...
Completing a risk assessment

Completing a risk assessment

Last updated: May 01, 2025
Completing a risk assessment

Use cases move through a review and approval process. During this process, you can do a risk assessment in Governance console to identify potential risks.

AI risk atlas

The risks from the AI risk atlas are available under the /Library/MRG/AI Risk Library business entity.

The predefined Risk Identification questionnaire assessment uses the AI Risk Library. You can also manually associate risks to use cases, models, and other objects.

To view the AI Risk Library, click Primary menu > Assessments > Risks. Filter the grid to show the /Library/MRG/AI Risk Library business entity.

To see a list of questionnaire templates, click Primary menu icon > Assessments > Questionnaire templates.

Procedure

To assess risks, do the following steps:

  1. Click Home button to go to the dashboard.
  2. Click the My Tasks tab, and then click the use case that you want to assess.
  3. Read about the use case.
  4. Under Risk ID Assessments, click a risk assessment.
    For example, watsonx.governance includes a predefined AI Use Case Risk Identification questionnaire assessment.
  5. Complete the questionnaire.
    The status shows you the number of questions and how many were answered.

    For some questions, you might need to enter a comment or attach a file.

    To see the history of an answer, click Activity.

  6. Click Actions > Risk identification complete.
  7. Click Actions > Start AI Assessment Workflow.

    Your answers are used to identify potential risks that are associate with the use case.

  8. Return to your use case. Risk owners assess each risk that is listed in the Risks section. When all the risks are approved or set to Not applicable, the use case can move to the next stage of the workflow.
  9. Verify that the Stakeholder departments list includes the departments that need to review your use case.
  10. Click Actions > Submit for stakeholer review.

    The use case stakeholders receive a notification to review the use case.