Version Changes Not Communicated to Users
版本變更未告知使用者
Operation & Monitoring
Risk Description
When output quality in a downstream application suddenly deteriorates, and the team spends several days investigating its own code and data; due to unmitigated control gaps, the cause turns out to be a change in the upstream model version, which was never communicated, triggering compliance exposure and operational reputational costs.
Framework Mappings
EU AI ActArt.13、Art.25
ISO/IEC 42001Annex A.10.3
NIST AI RMFGOVERN 6.1
ISO/IEC 5338運作與監控
MIT AI Risk RepositoryDomain 7
Risk Treatment & Implementation Guidance
Contractually require advance notice and change descriptions for upstream model version changes; Record the depended-on model version at the application layer and verify per call, alerting on any change; Maintain a regression test set executed immediately upon change notice or detected version drift