{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"ai_governance","domain":["AI Governance"],"inherent_rating":"high","taxonomy":["nist-ai-rmf-risk","iso-23894-ai-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-catastrophic-cyber-misuse","description":"Users obtain meaningful uplift from an AI system for offensive cyber operations (malware development, vulnerability exploitation, autonomous intrusion) or for biological, chemical, nuclear, or radiological harm, exposing the deploying organization to severe legal, regulatory, and societal consequences.","details":{"category":"ai_governance","impact":"critical","inherent_rating":"high","likelihood":"low","risk_id":"ai-catastrophic-cyber-misuse","taxonomies":["nist-ai-rmf-risk","iso-23894-ai-risk"],"treatment":"mitigate"},"id":"risk:ai-catastrophic-cyber-misuse","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-catastrophic-cyber-misuse","sourceIds":["aiuc-1","eu-ai-act","iso-42001","nist-ai-tevv-athlon"],"sourceUrl":null,"title":"Misuse of AI systems for offensive cyber operations or catastrophic harm","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2ae3564d1b614803449e63238b5ee0b5de470a37bbcd85aa329b6f4a401c2856","properties":{"rationale":"Refusal policies and classifiers for offensive-cyber and CBRN uplift, with escalation of confirmed attempts, are the direct defense against catastrophic misuse.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-23-ea85f10d.json","sourceId":"uc:UC-AI-23","targetDetailPath":"/data/v1/records/risk-ai-catastrophic-cyber-misuse-6bced10d.json","targetId":"risk:ai-catastrophic-cyber-misuse","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:39c6d2f1e557c01b1dc787fced10a7b0a28ce06b4907261d626691260deb0cd0","properties":{"rationale":"Acceptable-use policy and use screening prohibit offensive-cyber and weapons-uplift uses, complementing the technical refusal control.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","sourceId":"uc:UC-AI-12","targetDetailPath":"/data/v1/records/risk-ai-catastrophic-cyber-misuse-6bced10d.json","targetId":"risk:ai-catastrophic-cyber-misuse","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:57c6d5f9f689d4b775c54e6478619f06f9f30a396267a5a6616557893080ca21","properties":{"rationale":"Scope and harmful-content filters catch part of the misuse surface; the dedicated misuse refusal control is primary.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-20-c0e507ce.json","sourceId":"uc:UC-AI-20","targetDetailPath":"/data/v1/records/risk-ai-catastrophic-cyber-misuse-6bced10d.json","targetId":"risk:ai-catastrophic-cyber-misuse","type":"mitigates"}],"schemaVersion":1}