Planning mitigationsMitigationsSVG
Effect class and implementation level of the 265 mitigations
Every mitigation in the catalogue carries an effect class and at least one implementation level. The matrix counts how many mitigations fall into each combination. Empty cells contain no catalogue mitigation for that combination. Assess whether your system needs additional measures based on its context of use.
For security and control ownership
Effect matrix
| Effect | Data | Model & training | Application, API & agents | Infrastructure | Use & operations | Organization | Supply chain | Total |
|---|---|---|---|---|---|---|---|---|
| Preventivetakes effect before the attack succeeds | 174 | |||||||
| Detectivemakes the event visible | 114 | |||||||
| Impact-limitinglimits the damage that occurs | · | · | 36 | |||||
| Correctivecorrects the faulty state | · | · | 4 | |||||
| Restorativerestores operation | · | · | · | · | 4 | |||
| Total | 61 | 68 | 166 | 49 | 91 | 38 | 17 | 265 |
Select a cell of the matrix to see the mitigations behind it.
The file shows the current state including any filters and carries the note, catalogue version and source.
The numbers describe the coverage of the catalogue, not the maturity of an organisation. A mitigation with several effect classes or levels appears in every cell that applies; the row and column totals, by contrast, count it only once. A total can therefore be smaller than the sum of its cells.
Versatile AI Risk Assessment is an aid for structuring AI risks and making them transparent. It does not replace legal or professional advice and makes no binding decisions.
Further analyses
The same data, a different question
The other nine analyses, searchable and filterable by perspective like the overview; those of the same perspective first.
Show filters
No filter set, the list shows the complete collection.9 of 9 further analyses
Checking frameworks and evidence
Framework mappings
Where is this anchored professionally and legally?
No result for this selection.
Remove a filter or clear the search. The numbers in the filter column show how many entries the collection holds for each value.
Related
From the analysis to the assessment
All 52 threats in full: description, impact, example, mitigations and verified sources.
To the catalogueSix questions along the EU AI Act and a deadline plan with the obligations that apply to your system.
To the quick checkChoose a role and a risk class and see which EU AI Act obligations apply from when, with legal reference and evidence.
To the obligations compassThe full assessment with system context, threat selection and evidence tracking, free of charge in the browser.
To the live demo