AI Governance Engineer
GitHub

Risk source

By Updated

Anything that can give rise to risk alone or in combination, such as a dataset, a tool grant, an adversary or a user group 1. Internal sources sit inside the organisation's control; external ones arise outside it and are mostly engineered against and monitored.

Developed in
ch. 13, Internal and external risk sources
Chapters
ch. 13, Risk Management
Contrast with
Contributing factor
Source
1 numbered reference, listed below

Where it is used

2 chapters of the Body of Knowledge use the term. Each link opens the first section that does.

Risk source: mentions per chapter4 mentions of the term across 2 of the 23 chapters of the Body of Knowledge; the chapters the glossary cross-references are drawn solid.Cross-referenced chapterOther chapter03 Values & Principles: 1 mention03 Values & Principles113 Risk Management: 3 mentions13 Risk Management3No mentions in the other 21 chaptersSource: the Body of Knowledgev0.5.0
Risk source: mentions per chapter4 mentions of the term across 2 of the 23 chapters of the Body of Knowledge; the chapters the glossary cross-references are drawn solid.Cross-referenced chapterOther chapter00010203 Values & Principles: 1 mention103040506070810111213 Risk Management: 3 mentions31314151617181920212223Source: the Body of Knowledge v0.5.0
Mentions per chapter How often each chapter names the term, with the chapters the glossary cross-references drawn solid. The longest bar is where to read the term in use; bars spread across many chapters mark a term that runs through the discipline.
Mentions as a table
Mentions of Risk source per chapter
ChapterMentionsCross-referenced
00 Preface0No
01 Definition0No
02 Why Now0No
03 Values & Principles1No
04 The Stack0No
05 Patterns0No
06 The Role0No
07 Maturity Model0No
08 Regulatory Map0No
10 Reading List0No
11 AI Defined0No
12 Governance Program0No
13 Risk Management3Yes
14 Development0No
15 Deployment0No
16 Fairness & XAI0No
17 Incidents0No
18 EU AI Act0No
19 Privacy & AI0No
20 Existing Law0No
21 AI Laws Worldwide0No
22 Principles & Standards0No
23 AI Agents0No

Sources

  1. [1] Crosswalk: AI RMF (1.0) and ISO/IEC FDIS 23894 (function-to-clause mapping, incl. risk sources). NIST. 2023-01-26. https://www.nist.gov/system/files/documents/2023/01/26/crosswalk_AI_RMF_1_0_ISO_IEC_23894.pdf (verified: primary)

Definitions of legal terms paraphrase the cited text, which governs. Dated statements are as of .

Cite this term

García Aibar, J. (2026). Risk source. In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0), Glossary. https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/glossary/risk-source. CC BY 4.0

BibTeX

@misc{aige2026risksource,
  author  = {Jorge García Aibar},
  title   = {{Risk source}},
  note    = {Glossary, AI Governance Engineering: The Thesis \& Body of Knowledge, version 0.5.0},
  year    = {2026},
  doi     = {10.5281/zenodo.22956197},
  url     = {https://aigovernanceengineer.com/glossary/risk-source}
}