search menu icon-carat-right cmu-wordmark

A Risk Management Perspective for AI Engineering

White Paper
This paper describes several steps of OCTAVE FORTE in the context of adopting AI technology.

Software Engineering Institute


OCTAVE FORTE is a process model that organizations can use to identify and mitigate risks. Its steps include establishing risk governance, appetite, and policy; identifying risks, threats, and vulnerabilities; and forming and implementing an improvement plan.

This paper focuses on a few of these steps in the context of adopting AI technology. These steps provide a starting point for organizations investigating the adoption of AI and exploring the associated risks.