{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"ai_governance","domain":["AI Governance","Governance, Policy & Oversight"],"inherent_rating":"high","taxonomy":["nist-ai-rmf-risk","iso-23894-ai-risk","eu-ai-act-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-insufficient-human-oversight","description":"Because consequential AI decisions run under full automation with reviewers who lack the authority, information, or AI literacy to intervene, meaningful human control is absent and automation complacency erodes vigilance, so erroneous or harmful automated decisions reach individuals unchecked.","details":{"category":"ai_governance","impact":"high","inherent_rating":"high","likelihood":"medium","risk_id":"ai-insufficient-human-oversight","taxonomies":["nist-ai-rmf-risk","iso-23894-ai-risk","eu-ai-act-risk"],"treatment":"mitigate"},"id":"risk:ai-insufficient-human-oversight","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-insufficient-human-oversight","sourceIds":["aiuc-1","eu-ai-act","iso-42001","nist-ai-agent-identity","nist-ai-tevv-athlon"],"sourceUrl":null,"title":"Insufficient human oversight and automation complacency","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4966e9b62697f2a52f558561b08297eaf64b5497cba9c8ca4cd4f26d4a48f28c","properties":{"rationale":"Defining required AI-literacy/competencies and authorities equips reviewers to intervene, enabling the oversight operated by UC-16.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-02-d2679f4e.json","sourceId":"uc:UC-AI-02","targetDetailPath":"/data/v1/records/risk-ai-insufficient-human-oversight-6c4f3dfa.json","targetId":"risk:ai-insufficient-human-oversight","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:82416ab936d03842ea30036b00d6f1621c68c948ed02c191093c6a5c0f698002","properties":{"rationale":"Documenting required human-oversight measures for deployers enables the oversight UC-16 operates.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-10-f53dd533.json","sourceId":"uc:UC-AI-10","targetDetailPath":"/data/v1/records/risk-ai-insufficient-human-oversight-6c4f3dfa.json","targetId":"risk:ai-insufficient-human-oversight","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:92718ca20f3aba8a618e7b96854f62cb7376c00660277e6923d6ec52f3d7498f","properties":{"rationale":"Assigning competent overseers with authority to interpret, override or halt and automation-bias awareness is the direct inverse of the missing-oversight risk.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-16-b95e2895.json","sourceId":"uc:UC-AI-16","targetDetailPath":"/data/v1/records/risk-ai-insufficient-human-oversight-6c4f3dfa.json","targetId":"risk:ai-insufficient-human-oversight","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:af64a46f0cf0750bdc1e5b4a37cbb3ae602856ab3e1083c4ddb37f615381b498","properties":{"rationale":"The obligation register assigns the deployer oversight-assignment duty to a specific owner.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","sourceId":"uc:UC-AI-13","targetDetailPath":"/data/v1/records/risk-ai-insufficient-human-oversight-6c4f3dfa.json","targetId":"risk:ai-insufficient-human-oversight","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c6544a91d9d991f1d537b87a1da443b4364e318a48c2eee236c3599a4b2d752b","properties":{"rationale":"Approval gates and reviewed escalations put a human back in the loop for consequential agent actions.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-19-535f3660.json","sourceId":"uc:UC-AI-19","targetDetailPath":"/data/v1/records/risk-ai-insufficient-human-oversight-6c4f3dfa.json","targetId":"risk:ai-insufficient-human-oversight","type":"mitigates"}],"schemaVersion":1}