Versatile AI Risk Assessment

AI threat catalogue Reliability and Responsible Use Production

Overreliance

People tend to accept convincing-sounding AI outputs without checking them (automation bias). When employees or downstream systems rely uncritically on AI for important decisions, errors go undetected and cause real-world harm.

As of: October 2026 · Catalogue version 2026.10.24.2 · 5 mitigations · 11 verified sources

Description

AI systems phrase their answers fluently and confidently even when the content is wrong. This is exactly what fuels automation bias: the human tendency to trust the results of an automated system more than one's own judgement. This threat does not come from attackers; it arises in everyday work, for example under time pressure or when knowledge about the limits of AI is missing. It becomes especially critical when AI outputs feed into follow-up decisions or other systems without human review: a single undetected error then propagates and compounds. A decline in model quality also stays invisible for as long as nobody questions the results.

Possible impact

Poor decisions based on unchecked AI outputs first hit the people affected, such as applicants, customers, or patients, and then fall back on the company. Financial losses, liability questions, and reputational damage follow. The EU AI Act requires effective human oversight for high-risk systems, and the GDPR places strict limits on fully automated individual decisions.

Example

An HR department has incoming applications pre-ranked by an AI system and adopts the ranking as it is. Only months later does it emerge that the system systematically screened out suitable candidates and that nobody had ever spot-checked its recommendations.

Recommended mitigations (5)

Compare effects and implementation levels. Expand each entry for the additional classification and rationale.

  • Clear confidence indicators in UI

    Technical
    Effect
    Preventive, Detective
    Implementation level
    Application, API & agents, Use & operations
    Classification and rationale

    Primarily technical: The application makes uncertainty, system boundaries, or safe next steps visible and supports informed decisions.

  • User training on AI limitations

    People & competence
    Effect
    Preventive
    Implementation level
    Organization, Use & operations
    Classification and rationale

    Complementary control typeOrganizational & process-based

    Primarily a people-and-competence control: Human knowledge, attention, or professional judgment produces the protective decision; complemented by binding workflows.

  • Human verification for high-stakes decisions

    Organizational & process-based
    Effect
    Preventive, Detective
    Implementation level
    Organization, Use & operations
    Classification and rationale

    Complementary control typePeople & competence

    Primarily organizational and process-based: A binding workflow requires an accountable human decision before use or execution; complemented by human expertise and judgment.

  • Output provenance and source attribution

    Technical
    Effect
    Preventive, Detective
    Implementation level
    Application, API & agents, Use & operations
    Classification and rationale

    Complementary control typeOrganizational & process-based

    Primarily technical: Cryptographic or machine-verifiable properties protect confidentiality, integrity, or provenance; complemented by binding workflows.

  • Explainability features

    Technical
    Effect
    Detective
    Implementation level
    Model & training, Application, API & agents, Use & operations
    Classification and rationale

    Primarily technical: The application makes uncertainty, system boundaries, or safe next steps visible and supports informed decisions.

Framework mappings

Verified locations in OWASP, NIST AI RMF, MITRE ATLAS, the EU AI Act and further frameworks. The mappings are taxonomic, not evidence of compliance.

Verified references (11)

Every reference states the framework, the exact location and the publishing organisation.

EU AI Act obligations related to this threat

The obligations from the obligations compass whose articles the catalogue maps to this threat. Each leads to its entry with core, action step and evidence; whether it applies to you depends on role and risk class.

  • Support the AI literacy of your staff Art. 4 · applies from 2 February 2025 · amended by Reg. 2026/1744

    Statutory roles: Provider, Deployer, Product manufacturer, Provider of a general-purpose AI model. Classes: Prohibited practice, High-risk under Annex III, High-risk as a product or safety component, System subject to transparency obligations, General-purpose AI model, Model with systemic risk, Minimal risk.

    Regulation (EU) 2026/1744 recast Art. 4. The duty to ensure AI literacy has become a duty to support its development. It is now expressly clarified that no one has to guarantee a particular level of competence for any individual. The obligation as such remains and has applied since 2 February 2025. The wording attaches to AI systems; a provider of a general-purpose AI model alone is covered in so far as they also provide or deploy systems.

    This reference is a review prompt. A threat match alone does not establish applicability.

  • Provide instructions for use to deployers Art. 13 · applies from Annex III: 2 December 2027 · Annex I: 2 August 2028

    Statutory roles: Provider, Product manufacturer. Classes: High-risk under Annex III, High-risk as a product or safety component.

    This reference is a review prompt. A threat match alone does not establish applicability.

  • Build in effective human oversight Art. 14 · applies from Annex III: 2 December 2027 · Annex I: 2 August 2028

    Statutory roles: Provider, Product manufacturer. Classes: High-risk under Annex III, High-risk as a product or safety component.

    This reference is a review prompt. A threat match alone does not establish applicability.

All 62 obligations by role, risk class and deadline in the obligations compass

More entries from the topic group Reliability and Responsible Use.

Matching use cases

This list shows where to review this threat, rather than how high the risk is.

Belongs on the checklist for every AI system. What to review for every AI system

Particularly important for:

Frequently asked questions

What is Overreliance?
People tend to accept convincing-sounding AI outputs without checking them (automation bias). When employees or downstream systems rely uncritically on AI for important decisions, errors go undetected and cause real-world harm.
Which mitigations help against Overreliance?
The catalogue lists 5 mitigations, each with control type, effect and implementation level. First among them are Clear confidence indicators in UI, User training on AI limitations and Human verification for high-stakes decisions.
Which EU AI Act obligations does Overreliance touch?
The catalogue maps this threat to Art. 4, Art. 13 and Art. 14 of the EU AI Act. In the obligations compass this leads to: Support the AI literacy of your staff, Provide instructions for use to deployers and Build in effective human oversight. Whether an obligation applies depends on role, risk class and deadline.

Assess this threat in your own system

The live demo contains all 52 threats of this catalogue, including the EU AI Act and GDPR assessment. The free single modules cover AI risk, the EU AI Act and GDPR. No sign-up; the assessment runs locally in your browser.

Cite this entry

For reports, policies or internal documents; the link leads directly to this entry.

“Overreliance”. Versatile AI Risk Assessment, AI threat catalogue, as of October 2026.
https://www.versatile-ai-risk-assessment.com/en/wissensbasis/threats/overreliance/

← Back to the full catalogue