Cyber & IT Supervisory Forum - Additional Resources

Determine and delineate the expected and acceptable AI system context of use, including: social norms impacted individuals, groups, and communities potential positive and negative impacts to individuals, groups, communities, organizations, and society operational environment Perform context analysis related to time frame, safety concerns, geographic area, physical environment, ecosystems, social environment, and cultural norms within the intended setting (or conditions that closely approximate the intended setting. Gain and maintain awareness about evaluating scientific claims related to AI system performance and benefits before launching into system design. Identify human-AI interaction and/or roles, such as whether the application will support or replace human decision making. Plan for risks related to human-AI configurations, and document requirements, roles, and responsibilities for human oversight of deployed systems. Transparency & Documentation To what extent does the plan specifically address risks associated with acquisition, procurement of packaged software from vendors, cybersecurity controls, computational infrastructure, data, data science, deployment mechanics, and system failure? Which AI actors are responsible for the decisions of the AI and is this person aware of the intended uses and limitations of the analytic? Which AI actors are responsible for maintaining, re-verifying, monitoring, and updating this AI once deployed? Who is the person(s) accountable for the ethical considerations across the AI lifecycle? Organizations can document the following:

52