AAISM Domain 2 Master Class | AI Risk Management Explained

Value of the Information & Strength of the Argument

The video provides a comprehensive overview of AI risk management, covering essential frameworks and practical considerations. The argumentation is solid, using real-world examples like the retail chain incident to illustrate risks. However, the depth is limited; it serves as an introductory guide rather than an in-depth technical analysis. The presenter’s explanations are clear and logical, but some sections could benefit from more detailed case studies or technical specifics.

Scientific Rigor, Source Quality, Title Accuracy

The video references key frameworks such as NIST AI RMF and the EU AI Act, but does not provide direct citations or URLs within the video itself. The description includes links to related videos, which may offer additional context. The title accurately reflects the content, and the structure is well-organized. However, the lack of explicit source citations within the video reduces its scientific rigor, though it is appropriate for an educational tutorial.

The title accurately reflects the content, which is a comprehensive master class on AI risk management for the AAISM Domain 2 exam.

8/10

The video provides a structured overview of AI risk management frameworks, referencing NIST AI RMF and EU AI Act, with practical examples. However, it lacks deep technical detail and relies on the presenter's expertise without citing specific sources beyond general references.

• 00:0000:25 – Introduction
• 00:2501:12 – Domain Overview
• 01:1205:24 – Introduction
• 05:2409:15 - Part A - AI Risk Assessment Frameworks
• 09:1511:36 - AI Trust Attribute
• 11:3614:30 - Risk Management Life Cycle
• 14:3019:30 - IT Risk Identification
• 19:3023:44 - IT Risk Identification - OWASP Top 10 list for Large Language Model Application
• 24:4425:41 - AI Risk Framework Landscape
• 25:4126:20 - Key Organizations
• 26:2028:14 - NIST Artificial Intelligence Risk Management Framework
• 28:1430:25 - EU AI ACT (Regulation EU 2024/1689)
• 30:2533:25 - Fundamentals Right Impact Assessment
• 33:2535:37 - Conformity Assessment
• 35:3737:31 – Comparison
• 37:3139:35 - AI Specific Privacy Risks
• 39:3540:09 - Risk Response Strategies
• 40:0941:06 - Risk Assessment
• 41:0641:40 - Risk Response Strategies
• 41:4043:08 - Four Risk Response
• 43:0844:45 - Threat Modeling
• 44:4545:59 - Part B – Introduction
• 45:5947:25 - AI Threat Landscape
• 47:2550:08 - Key AI Threats
• 50:0851:40 - AI Threat Impact Categories
• 51:4052:50 - Data Leakage
• 52:5054:20 - Data Poisoning
• 54:2056:09 - Model Poisoning
• 56:0901:01:25 - Other Technical Threat
• 1:01:2501:01:56 - Data Poisoning vs Model Poisoning vs Model Inversion
• 1:01:5601:06:20 - Attack Mind map
• 1:06:2001:10:09 - Part C – Provider, Vendor & Supply Chain Risk
• 1:10:0901:11:22 - Role of Enterprise in AI Supply Chain
• 1:11:2201:12:19 - Provider Vs Deployer
• 1:12:1901:13:40 - AI Deployer vs AI Provider Responsibilities
• 1:13:4001:13:59 - NIST AI RMF – AI Actor Roles Across the AI Lifecycle
• 1:13:5901:16:47 - NIST AI RMF Roles
• 1:16:4701:17:36 - AI Actor Roles
• 1:17:3601:19:39 - AI Vendor Management
• 1:19:3901:20:15 - AI Vendor Considerations
• 1:20:1501:21:46 - AI Specific Vendor Risks
• 1:21:4601:24:06 - Vendor Selection Decision
• 1:24:0601:26:04 - AI Integration Risk
• 1:26:0401:29:01 - AI Software Supply Chain Risk
• 1:29:0101:29:54 – Practices for Vendor AI Monitoring
• 1:29:5401:30:35 - Adversarial Testing
• 1:30:3501:31:38 - Other Practice
• 1:31:3801:32:47 - Supply Chain Parties

• AAISM Domain 1 — Referenced as a prerequisite for understanding the AAISM certification.
• Practical AI Governance — Mentioned as a related resource for AI governance.
• Practical ISO 42001 — Referenced for ISO 42001 standard related to AI management systems.

• NIST AI Risk Management Framework — The video discusses this framework as a key reference for AI risk management.
• EU AI Act — The video references this regulation as a compliance requirement.