Abstract
AbstractOrganizations that develop and deploy artificial intelligence (AI) systems need to manage the associated risks—for economic, legal, and ethical reasons. However, it is not always clear who is responsible for AI risk management. The three lines of defense (3LoD) model, which is considered best practice in many industries, might offer a solution. It is a risk management framework that helps organizations to assign and coordinate risk management roles and responsibilities. In this article, I suggest ways in which AI companies could implement the model. I also discuss how the model could help reduce risks from AI: it could identify and close gaps in risk coverage, increase the effectiveness of risk management practices, and enable the board of directors to oversee management more effectively. The article is intended to inform decision-makers at leading AI companies, regulators, and standard-setting bodies.
Publisher
Springer Science and Business Media LLC
Subject
Artificial Intelligence,Human-Computer Interaction,Philosophy
Reference132 articles.
1. Alaga J, Schuett J (2023) Coordinated pausing: an evaluation-based coordination scheme for frontier AI developers. arXiv. http://arxiv.org/abs/2310.00374
2. Alphabet (2022) Notice of 2022 annual meeting of stockholders and proxy statement. SEC. https://perma.cc/Q23E-WQWP
3. Anderljung M, Barnhart J, Korinek A, Leung J, O’Keefe C, Whittlestone J et al (2023) Frontier AI regulation: managing emerging risks to public safety. arXiv. http://arxiv.org/abs/2307.03718
4. Andersen TJ, Sax J, Giannozzi A (2022) Conjoint effects of interacting strategy-making processes and lines of defense practices in strategic risk management: an empirical study. Long Range Plan 55(6):102164. https://doi.org/10.1016/j.lrp.2021.102164
5. Anthropic (2023a) Anthropic’s responsible scaling policy. Anthropic. https://perma.cc/S393-UCHE