Understanding threatsThreats MitigationsSVG
Distribution of threats across supply chain, development and production
The catalogue assigns every threat to the phase in which it arises. The lanes show this distribution; the bars beside them show the implementation levels at which the mitigations of the same phase take effect. Mitigations do not necessarily act where a threat originates.
For governance, procurement and programme management
Lifecycle
Supply Chain
3 of 52 threats
Where the mitigations of this phase take effect
- Supply chain 6
- Data 4
- Model & training 4
- Infrastructure 2
- Use & operations 1
- Organization 1
Development
4 of 52 threats
Where the mitigations of this phase take effect
- Model & training 17
- Data 8
- Supply chain 2
- Use & operations 1
- Organization 1
Production
45 of 52 threats
Where the mitigations of this phase take effect
- Application, API & agents 166
- Use & operations 89
- Data 49
- Model & training 47
- Infrastructure 47
- Organization 36
- Supply chain 9
The file shows the current state including any filters and carries the note, catalogue version and source.
The phase names where a threat arises, not when it is discovered. A threat that arises in the supply chain may only become visible during live operation.
Versatile AI Risk Assessment is an aid for structuring AI risks and making them transparent. It does not replace legal or professional advice and makes no binding decisions.
Further analyses
The same data, a different question
The other nine analyses, searchable and filterable by perspective like the overview; those of the same perspective first.
Show filters
No filter set, the list shows the complete collection.9 of 9 further analyses
Checking frameworks and evidence
Framework mappings
Where is this anchored professionally and legally?
No result for this selection.
Remove a filter or clear the search. The numbers in the filter column show how many entries the collection holds for each value.
Related
From the analysis to the assessment
All 52 threats in full: description, impact, example, mitigations and verified sources.
To the catalogueSix questions along the EU AI Act and a deadline plan with the obligations that apply to your system.
To the quick checkChoose a role and a risk class and see which EU AI Act obligations apply from when, with legal reference and evidence.
To the obligations compassThe full assessment with system context, threat selection and evidence tracking, free of charge in the browser.
To the live demo