S0008RS1-T02-S0008-Z · Full risk code

Grey Areas in Value-Chain Responsibility

價值鏈責任分擔灰色地帶

Inception
Risk Description

When after an automated system causes personal injury or property damage, investigation reveals the problem may stem from inherent limitations of the base model, parameter settings during integration, or the way the system is used in the deployment environment; due to unmitigated control gaps, each party asserts it fulfilled its obligations, responsibility cannot be clearly assigned, redress is difficult, and the true cause is never properly identified or remedied, triggering compliance exposure and operational reputational costs.

Framework Mappings

ISO/IEC 42001Annex A.3.2、A.10.2、A.10.3
NIST AI RMFGOVERN 2.1、GOVERN 6.1
ISO/IEC 23894§6.3
ISO/IEC 5338啟動
MIT AI Risk RepositoryDomain 6

Risk Treatment & Implementation Guidance

Establish a liability-allocation matrix at procurement and integration, defining each party's obligations and handover conditions across foundation model, integration and deployment; Specify quality assurance, defect notification and joint-investigation duties in contracts, precluding blanket disclaimers; Evaluate liability insurance and agree cross-party loss-sharing arrangements