Versatile AI Risk Assessment

The 265 mitigations by control type and topic group

The control type names what kind of mitigation it is, and with it usually which part of the organisation has to implement it. The switch for the complementary types makes the difference visible: both ways of counting are correct; they simply answer different questions.

Who it is for: For leadership, security ownership and anyone who has to assign responsibilities

Ownership

265 mitigations yield 265 assignments. Most frequent type: Technical with 217. Without a mitigation in this scope: Physical & environmental.

265mitigations in this selection
265assignments, first type only
82 %of which technical
48assignments outside technology

44mostly technical · 73 %

41mostly technical · 76 %

36mostly technical · 97 %

26mostly technical · 88 %

25mostly technical · 64 %

23mostly technical · 91 %

20mostly technical · 100 %

20mostly technical · 80 %

18mostly technical · 89 %

12mostly technical · 58 %

Select a control type or a bar segment to see the mitigations behind it with their full classification.

Effect matrixThe effect matrix shows at which implementation level these mitigations act.

The file shows the current state including any filters and carries the note, catalogue version and source.

The control type describes what kind of mitigation it is, not how costly or how effective it is. Neither an effort distribution nor a staffing plan can be derived from the share.

Versatile AI Risk Assessment is an aid for structuring AI risks and making them transparent. It does not replace legal or professional advice and makes no binding decisions.

Planning mitigations

The same data, a different question

Where mitigations take hold, at which level they act and which part of the organisation has to implement them.

  1. Preview of the analysis: Effect matrix Effect matrix How and where do mitigations take effect? For security and control ownership
Understanding threats
Placing your own system
Checking frameworks and evidence

Overview of all ten analyses

Related
Threat catalogue

All 52 threats in full: description, impact, example, mitigations and verified sources.

To the catalogue
EU AI Act quick check

Four short sections along the EU AI Act for a first, non‑binding orientation of your system.

To the quick check
Assess it yourself

The full assessment with system context, threat selection and evidence tracking, free of charge in the browser.

To the live demo