Lack Of Appropriate Instruction For Use
has severity
Represens controls that are applied to detect bias in datasets, models, algorithms, ect.
Bias Detection
Competent Public Authority
Refers to the use for which an AI system is intended by the provider, including the specific context and conditions of use, as specified in the information supplied by the provider in the instructions for use, promotional or sales materials and statements, as well as in the technical documentation. [Source: AI Act, Art 3(12)]
Purpose
Refers to the verification of the authenticity of documents.
Verifying Authenticity
A person who has made an application.
Applicant
Weakness of a system can be exploited by one or more threats. [Source: ISO/IEC TR 24028, 3.48 with modifications]
Vulnerability
Reclaiming Public Assisstance Services
Lack Of Transparency
Indicates the degree to which data has attributes that correctly represent the true value of the intended attribute of a concept or event in a specific context of use. [ISO 22989, 3.4.3]
Data Accuracy
Refers to crime analytics regarding natural persons, allowing law enforcement authorities to search complex related and unrelated large data sets available in different data sources or in different data formats in order to identify unknown patterns or discover hidden relationships in the data.
Assessing Risk Of Irregular Immigration
Knowledge Representation
Public Authority
is risk source for
Blueprint
Represents indicators for expressing properties of AI systems.
AI System Indicator
Instruction Of Use
Post-market Monitoring System Description
Represents reversing the outcome of a system.
Reversing The Outcome
Hardware on which the AI system run
Execution Environment
is part of control
Biometric Categorisation
Student Assessment In Educational Institutions
Post-market monitoring plan
Lack Of Appropriate Level Of Security
AI Risk Ontology
AIRO represents AI risk concepts and relations based on the AI Act draft and ISO 31000 standard series.
Error In Input Data
Refers to the Assignment of tasks to persons.
Task Allocation
Represents controls that are applied to detect an event.
Detection Control
Optimisation Method
uses standard
A person who is studying at a school or a university.
Student
Error In Data Collection
Wrong Data Set Design Choice
Residence Permits Application Examination
Perfomance Related Risk Source
Assessing Risk Of Offending
Assessing Security Risk
Represents the main approaches and techniques used for development of AI systems.
AI Technique
is used for validating
Identifying natural persons at a distance through the comparison of a person’s biometric data with the biometric data contained in a reference database.
Remote Biometric Identification
Indicates the AI techniques used in an AI system.
uses technique
Represents a right, freedom, or principle set out in the EU Charter of Fundamental Rights.
Fundamental Right
Biased Validation Data Set
A person who is being accused of criminal offences.
Defendant
Employee Evaluation
Physical, mathematical, or otherwise logical representation of a system, entity, phenomenon, process or data [Source: ISO/IEC FDIS 22989, 3.1.23]
Model
Assessing Past Criminal Behaviour
Outcome of an event affecting objectives. [Source: ISO 31000, 3.6]
Consequence
Represents controls that are implemented using a technology.
Technical Control
Establishing priority in the dispatching of emergency first response services, including by firefighters and medical aid.
Prioritisation Of Emergency Service
Error In Data Prepration
Interview Evaluation
Represents controls that applied to prevent an event from happening.
Elimination Control
Bayesian Estimation
An individual human being.
Natural Person
Represents a software that is developed with one or more of the AI Approaches and can, for a given set of human-defined objectives, generate outputs such as content, predictions, recommendations, or decisions influencing the environments they interact with. [Source: AI Act, Art 3(1)]
AI System
Represents disruption of management and operation of critical infrastructure.
Disruption Of Operation Of Critical Infrastructure
Identifaction of natural persons using biometric data.
Biometric Identification
A person who has applied for a visa.
Visa Applicant
Unsupevised Learning
Represenets machine learning approaches, including supervised, unsupervised and reinforcement learning, using a wide variety of methods including deep learning. [Source: AI Act, Annex I]
Machine Learning Approach
Attack trying to manipulate the training dataset
Data Poisoning
Represents purpose of producing meaningful recommendations to users of the system.
Producing Recommendation
Irrelevant Validation Data
Assessing Tests Required For Admission
Represents areas that AI might have impact on.
Area Of Impact
Refers to termination of work-related contractual relationships.
Making Termination Decision
Represents adverse impacts of AI on human behaviour.
Distortion In Human Behaviour
Refers to the purpose of determining access or assigning natural persons to educational and vocational training institutions.
Determining Access To Education
Data used to compare the performance of different candidate models [Source: ISO/IEC FDIS 22989, 3.2.5].
Validation Data
Unavailability Of Data Set
Refers to inacurracy of the predictions, recommondations, or decisions produced by the system.
Low Level Of Accuracy
is used for testing
Assigning People To Educational Institutions
Indicates decreased level of system's accuracy resulted from materialisation of a risk.
Degraded Accuracy
Visa Application Examination
Represents outcomes of a consequence on persons, groups, facilities, environment, etc.
Impact
eliminates event
Judicial Authority
Represents knowledge-based approaches, including knowledge representation, , knowledge bases and expert systems.
Knowledge Based Approach
is developed by
Represents psychological health.
Psychological Health
Represents death of a person caused by AI.
Death
Refers to the purpose of assessing students in educational and vocational training institutions and for assessing participants in tests commonly required for admission to educational institutions.
Student Assessment
Determine Credit Score
Represents damage of properties caused by AI.
Property Damage
Indicates decreased level of system's robustness resulted from materialisation of a risk.
Decreased Robustness
Indicates the degree to which a product or system provides the correct results with the needed degree of precision. [ISO 22989, 3.4.4]
AI System Accuracy
is used for training
has impact
Refers to manipulating or generating audio content.
Generating Audio Content
Represents use of AI systems for planning and scheduling.
Planning
Incompleteness Of Testing Data Set
A person who has entered a territory.
Person Who Has Entered A Territory
Post-market Monitoring System
Assessing Risk For Potential Victims Of Criminal Offences
has expected accuracy
Automatic pattern recognition comparing stored images of human faces with the image of an actual face, indicating any matching, if it exists, and any data, if they exist, identifying the person to whom the face belongs [Source: ISO 5127:2017, 3.1.12.09].
Facial Recognition
Incompleteness Of Validation Data Set
Represents impact of AI on persons' health and wellbeing.
Wellbeing Impact
Represents physical injuries caused by AI.
Physical Injury
Systematic difference in treatment of certain objects, people, or groups in comparison to others [ISO 22989]
Bias
is used to measure
Cyberattack
Represents the sector/domain the AI system is intended to be used in.
Domain
Evaluating Behaviour Of Employee
Reducing Public Assisstance Services
detects event
Personality Traits Assessment
Job Applicant
A person who has made an application for employment.
use of subliminal techniques beyond a person’s consciousness in order to materially distort a person’s behaviour in a manner that causes or is likely to cause that person or another person physical or psychological harm
Subliminal Technique
Error In Testing Data Set
Symbolic Reasoning
Refers to the verification of the authenticity of travel documents and supporting documentation of natural persons and detection of non-authentic documents by checking their security features.
Verifying Authenticity Of Travel Document
Data for which an AI system calculates a predicted output or inference [Source: ISO/IEC FDIS 22989, 3.2.9].
Input Data
Represents overriding outcome of a system.
Overriding The Outcome
Organisational Risk Source
Refers to identification of unknown patterns in data.
Pattern Recognition
is in vulnerable position
A person who works as a firefighter.
Firefighter
Specifies the extent to which the outcome produced with an AI system is easily reversible.
Reversibility
Refers to the use of AI systems for assessmen and evaluation.
Assessment
has consequence
DataSet-Related Risk Source
Indicates the probability of occurrence of an event.
has likelihood
Asylum Application Examination
Application Screening
has mode of operation
Represent impact on the enviroment.
Environmental Impact
Reinforcement Learning
Represents providing information to inform the user of in particular an AI system’s intended purpose and proper use, inclusive of the specific geographical, behavioural or functional setting within which the AI system is intended to be used.
Providing Instruction Of Use
Supervised Learning
Test Report
Intervention of a system's operation
Intervation
Unrepresentative Validation Data Set
Represents impact of AI on facilities and property.
Impact On Facility
Low Level Of Robustness
An individual human being who is below the age of 18 (according to the UN Convention on the Rights of the Child)
Child
Algorithm-Related Risk Source
Represents controls that do not involve human intervention.
Automated Control
Application Examination
Represents the measure that maintains and/or modifies risk. [Source: ISO 31000, 3.8]
Control
mitigates event
Error In Training Data Set
is followed by control
An entity who act on behalf of a public authority.
Representative Of Public Authority
Use of an AI system in a way that is not in accordance with its intended purpose, but which may result from reasonably foreseeable human behaviour or interaction with other systems [Source: AI Act, Article 3(13)]
Reasonably Forseeable Misuse
Represents tendency of automatically relying or over-relying on the output produced by an AI system
Over Reliance
Assessment Of Employee
Recuritment Test Evaluation
Examination of applications for asylum, visa and residence permits and associated complaints
Immigration Eligibility Assessment
Employee Behaviour Monitoring
Environment Of Use
Inductive Programming
Represents Logic-based approaches, including inductive (logic) programming.
Logic Based Approach
Represents purpose of capturing knowledge and acquiring new knowledge.
Knowledge Reasoning
Represents approval or refusual of a request, excutation of process, etc. to prevent or mitigate a risk.
Approval
Testing Data Risk Source
Assessing Health Risk
Refers to the application and usage of the AI system.
AI Application
Model Inversion
has impact on area
Unrepresentative Testing Data Set
Represents the deterioration of the environment caused by AI.
Environmental Damage
Represents any individual, group or organization that can affect, be affected by or perceive itself to be affected by a decision or activity [Source: ISO/IEC TR 24028, 3.37]
Stakeholder
A person who intends to enter a territory.
Person Who Intends To Enter Territory
has documentation
Pre-trianed Model
Any incident that directly or indirectly leads, might have led or might lead to : (a) the death of a person or serious damage to a person’s health, to property or the environment, (b) a serious and irreversible disruption of the management and operation of critical infrastructure [Source: AI Act, Articl3 3(44)]
Serious Incident
Refers to assessment related to employment, workers management and access to self-employment.
Assessment For Recruitment
Advertising Vacancies
Refers to incompentece of individuals to whom human oversight is assigned.
Incompetence Of Human Oversight Actors
Control applied to reduce likelihood or severity of the risk, consequence or impact.
Mitigation Control
Evaluating Performance Of Employee
has impact on AI subject
Operational Control
Represents purpose of predicting something based on the existing information.
Making Prediction
the ability of an AI system to achieve its intended purpose [Source: AI Act, Article 3(18)]
Performance
Refers to the evaluation of the reliability of evidence in the course of investigation or prosecution of criminal offences.
Evaluating Reliability Of Evidence
Verifying Authenticity Of Supporting Document
modifies event
Filtering applications for recruitment or selection of natural persons.
Application Filtering
An AI subject is an organization or entity that is impacted by an AI system, service or product.
AI Subject
System Related Source
Hardware on which the AI system run.
AI Hardware
Represents purpose of observing and keeping track of something.
Monitoring
A functional element that constructs an AI system. [Source: ISO 22989]
AI Component
Indicates decreased level of security of the AI system resulted from materialisation of a risk.
Decreased Security
Represents purpose of monitoring and evaluating performance and behavior of employees in workplace.
Employee Monitoring
Refers to the assessment of participants in tests required for admission to educational institutions.
Admission Test Assessment
Chance of an event happening. [Source: ISO 31000, 3.7]
Likelihood
Metric
Referes to predicting the occurrence or reoccurrence of an actual or potential criminal offence based on profiling of natural persons or assessing personality traits and characteristics or past criminal behaviour of natural persons or groups.
Predicting Recidivism
Indicates output of an AI system.
Output
Represents purpose of researching and interpreting facts and the law.
Legal Interpretation
a European standard as defined in Article 2(1)(c) of Regulation (EU) No 1025/2012
Harmonised Standard
Datasheet
Refers to the use of AI systems to detect an entity, pattern, etc.
Detection
Assessing Risk Of Reoffending
Any natural or legal person, public authority, agency or other body using an AI system under its authority. [Source: AI Act]
AI User
Refers to manipulating or generating video content.
Generating Video Content
has version
is performance of
Migration Related Complaints Examination
Input Data Risk Source
Biased Training Data Set
A group of persons such as citizens, marginsalised groups, etc.
Group
Represents consequences related to bias.
Bias Consequence
System Architecture
Represents the extent to which an AI system has been used or is likely to be used.
Extent Of Use
Indicates an element that has the potential give rise to a risk.
Risk Source
Test log
Version
The use of an AI system in a way that is not in accordance with its intended purpose.
Misuse
is expected accuracy of
Accuracy
EU Declaration Of Conformity
Ability of a system to maintain its level of performance under any circumstances. [Source: ISO 22989]
Robustness
Reinterpretable representation of information in a formalized manner suitable for communication, interpretation, or processing [Source: ISO/IEC 2382:2015, 2121272]
Data
Data used to train a machine learning model [ISO/IEC FDIS 22989, 3.3.16]
Training Data
A person who has applied for citizenship.
Citizenship Applicant
Represenets statistical approaches, Bayesian estimation, search and optimization methods. [Source: AI Act, Annex I]
Statistical Approach
Represents consequences related to the performance of the AI System.
Performance Consequence
A person who works as a medical aid.
Medical Aid
has execution environment
Irrelevant Training Data
Error In Validation Data Set
Represents area of health and safety.
Health And Safety
is used in form of
Indicates components of an AI system.
has component
A person who is participating in a test.
Test Participant
Represents indicators for expressing risk.
Risk Indicator
Represents health of a person.
Health
Dectection of content that is generated using deep fake.
Deep Fake Detection
is used in environment
A person who has applied for asylum.
Asylum Seeker
Refers to the detection of the emotional state of a natural person.
Emotion Recognition
Organisational Control
Irrelevant Testing Data
Revoking Public Assisstance Services
Represents the way a person acts.
Human Behaviour
A tool that has been used in development of an AI system.
Tool
A Phase of AI lifecycle which indicates evolution of the system from conception through retirement.
AI Lifecycle Phase
Document
Content generated using an AI system.
Content
Training Data Risk Source
Persons in work-related contractual relationships.
Employee
Discovering Hidden Relationships Related To Crime
Lack Of Human Oversight Measure
Indicates vulnerabilities of an AI system.
has vulnerability
Represents measures for overseening the system by natural persons to detect, prevent or minimise risk.
Human Oversight Measure
Represents occurrence or change of a particular set of circumstances. [Source ISO 31000, 3.5]
Event
Employee Performance Monitoring
is extent of use of
Detecting Non-Authentic Documents
Represents purpose of generating decisions.
Making Decision
Installation Instruction
Represents purpose of generating or manipulating content.
Generating Content
Design Specification
Identifying Unkown Patterns Of Crime
Indicator
Model Evasion
Represents training of staff, users, etc.
Staff Training
Incompleteness Of Training Data Set
Represents whether potentially harmed or adversely impacted persons are in a vulnerable position due to an imbalance of power, knowledge, economic or social circumstances, or age. [Source: AI Act]
Vulnerable Position
has lifecycle phase
Primary output of an AI system when provided with input data or information. [Source: ISO/IEC FDIS 22989, 3.1.27]
Prediction
Unrepresentative Training Data Set
Partial Control
is technical spec applied in
Decision generated by an AI system.
Decision
is used by
has post-market monitoring system
Represents controls performed by humans without any use of technologies.
Manual Control
inputs designed to cause the model to make a mistake
Adversarial Attack
Refers to manipulating or generating image content.
Generating Image Content
System
Search Method
Refers to profiling of natural persons in the course of detection, investigation or prosecution of criminal offences.
Profiling
Evaluation of the eligibility of natural persons for public assistance benefits and services.
Public Assistance Eligibility Assessment
Attack
Represnets controls that comprise a combination of automated and manual controls.
Semi Automated Control
Granting Public Assistance Services
Dispatching of emergency first response services, including by firefighters and medical aid.
Dispacthing Emergency Service
Represents psychological injuries caused by AI.
Psychological Harm
Security
Refers to assessment for education and vocational training purposes.
Assessment For Education
Operation Mode
Indicates a risk (of harm) associated with an AI system.
Risk
Law Enforcement Authority
refers to the forms in which AI system is placed on the market or put into service.
AI System Form
Refers to the application of the law to a concrete set of facts.
Applying The Law to Facts
Severity
has AI indicator
Represents physical health.
Physical Health
Refers to making decisions on promotion.
Making Promotion Decision
Standard
Refers to use of AI systems for making individual risk assessments of natural persons in order to assess the risk of a natural person for offending or reoffending or the risk for potential victims of criminal offences.
Individual Risk Assessment
Represents indicators for expressing attributes of users of AI systems.
User Indicator
produces output
affects
Biased Testing Data Set
Represents the state of being safe.
Safety
uses technical specification
A natural or legal person, public authority, agency or other body that develops an AI system or that has an AI system developed with a view to placing it on the market or putting it into service under its own name or trademark, whether for payment or free of charge. [Source: AI Act]
AI Developer
Represent a contol used to interrupt the system's operation.
Interruption
has risk
Testing Data
Technical Specification
Represents the expected lifetime of a system.
Expected Lifetime
Refers to the evaluation the creditworthiness of natural persons or establishing their credit score.
Creditworthiness Assessment
has purpose
Indicates the intended purpose of an AI system.
Indicates stakeholders of an AI system
has stakeholder
Indicates the domain (context) the AI system is intended to be used in.
is applied within domain
Validation Data Risk Source
A person who has applied for a residence permit.
Residence Permit Applicant