Risk Mapping is the primary way we evaluate risk across your AI systems. It is a structured, layered questionnaire built into our platform that walks your team through a guided assessment of each AI system to build a complete risk profile.
Rather than relying on ad hoc evaluations or spreadsheet-based checklists, Risk Mapping gives you a repeatable, consistent process that evaluates every AI system against the same set of criteria.
When you run a Risk Mapping assessment on an Asset in our platform, the system presents a series of structured questions organized into layers. Each layer goes deeper, building on the answers from the previous one to create a detailed understanding of the system's risk profile.
The questions cover all six of our risk dimensions - Bias, Robustness, Transparency, Privacy, Efficacy, and Exposure. Based on how your team responds, the platform determines which areas need further attention and which can be considered lower priority.
Here is the general flow:
1. You select an Asset from your inventory and start a Risk Mapping assessment
2. The platform presents guided questions - starting broad and getting more specific based on your answers
3. Your team works through the questions, providing context about the AI system's design, deployment, and use
4. The platform evaluates responses and generates a risk profile across all six dimensions
5. Results highlight which risk areas need deeper assessment, testing, or mitigation
Risk Mapping questions are designed to be answered by the people who know the AI system best - product owners, technical leads, compliance teams, or business stakeholders. They do not require deep technical expertise to complete.
Questions cover topics like:
The questions adapt based on your responses. If you indicate the system processes personal data, for example, you will see additional questions about privacy controls and data handling practices.
For teams that need a faster initial assessment, we also offer Express Risk Mapping. This is a streamlined version that covers the most critical questions in fewer steps, giving you a high-level risk snapshot without the full depth of a complete Risk Mapping session.
Express Risk Mapping is useful when you are triaging a large number of AI systems and need to quickly identify which ones require deeper evaluation first.
Once a Risk Mapping assessment is complete, you get a clear breakdown of risk across all six dimensions. This includes:
All results are stored against the Asset in your inventory, so the full risk history of every AI system is always accessible in one place.
Risk Mapping is typically the first assessment you run on a new AI system. It sets the foundation for all downstream governance activity. From the results, your team can decide whether to run specific assessments like a Bias Assessment or Robustness Assessment, trigger automated testing like Red Teaming or Counterfactual Bias Testing, or create a mitigation plan for identified risks.
Risk Mapping can also be included as a step in our Workflows - so it becomes part of an automated, end-to-end governance process that runs consistently across all your AI systems.