AI Residual Risk

Residual Risk Calculation
Business Process & System Record Residual Risk
Residual Risk Score = Inherent Risk Score minus Control Effectiveness.
Third Party AI Residual Risk
The third-party residual risk score is determined by the highest residual risk score from the system records it owns.
Company Entity AI Residual Risk
The Company Entity residual risk score is determined by the highest residual risk score from the business processes and system records associated with the entity that have completed an AI risk assessment.
Diagram illustrating how residual risk scores flow from business processes and system records to third parties and company entities
AI residual risk section divider graphic
AI residual risk detailed overview graphic showing score calculation across record types
TrustArc  ·  AI Residual Risk Calculation  ·  support.trustarc.com