1、AI Model RiskManagement FrameworkTable of ContentsTable of Contents.2Acknowledgments.4Executive Summary.5Intended Audience.6Scope.6Introduction.7The Need and Importance of MRM.7The Four Pillars:Model Cards,Data Sheets,Risk Cards,Scenario Planning.12Benefits of a Comprehensive Framework.15Core Compon

2、ents.181.Model Cards:Understanding the Model.182.Data Sheets:Examining the Training Data.223.Risk Cards:Identifying Potential Issues.244.Scenario Planning:The“What If”Approach.28Combining Techniques:A Holistic Approach.361.Leveraging Model Card Information for Risk Cards.362.Using Data Sheets to Enf

3、orce Model Understanding.363.Using Risk Cards to Inform Scenario Planning.374.Scenario Planning Feedback to Risk Management and Development.415.AI MRM in Action.43Conclusion and Future Outlook.49References.50Appendix 1:AI Frameworks,Regulations,and Guidance.52 Copyright 2024,Cloud Security Alliance.

4、All rights reserved.2The permanent and official location for the AI Technology and Risk Working Group ishttps:/cloudsecurityalliance.org/research/working-groups/ai-technology-and-risk.2024 Cloud Security Alliance All Rights Reserved.You may download,store,display on yourcomputer,view,print,and link

5、to the Cloud Security Alliance at https:/cloudsecurityalliance.org subject tothe following:(a)the draft may be used solely for your personal,informational,noncommercial use;(b)the draft may not be modified or altered in any way;(c)the draft may not be redistributed;and(d)thetrademark,copyright or ot

6、her notices may not be removed.You may quote portions of the draft aspermitted by the Fair Use provisions of the United States Copyright Act,provided that you attribute theportions to the Cloud Security Alliance.Copyright 2024,Cloud Security Alliance.All rights reserved.3AcknowledgmentsLead AuthorsM