AI Risk Tiering Guide

Five-dimension scoring worksheet and Tier 1–4 control requirements before deployment.

AI risk tiering framework template preview (AI-005)
.docx AI-005

AI Risk Tiering & Classification Guide

Five-dimension scoring worksheet and Tier 1–4 control requirements before deployment.

How to Fill Out This AI Risk Tiering & Classification Guide

AI risk tiering framework template — Complete one assessment per AI system — tier drives AI-008 HITL, AI-009 monitoring, and EU AI Act posture.

Recommended Owner: AI Governance Lead | System owner completes worksheet

Before you start

Getting Started

  • Enable Editing: Click Enable Editing in Word when prompted.
  • Replace brackets: Search for [Bold Brackets] and fill every placeholder with real names, tools, and dates.
  • Delete what does not apply: Shorter accurate text beats generic boilerplate auditors cannot test.
  • Cross-check Phase 1: Names and scope should match SOC-002, SOC-004, and COR-001 where referenced.

Toolkit links

Related templates in your kit

Keep these companion documents consistent (same owners, dates, and vendor names):

  • AI-006
  • AI-007
  • AI-008
  • AI-014b

Quality check

Before You Finalize

  • Every [bracket] placeholder is replaced or marked N/A with a short reason.
  • Roles and tool names match COR-005 org chart and SOC-004 system description.
  • Review and Approval section is signed with name, title, and date.

Evidence

Where to Store It

  • Store the completed file in your compliance evidence folder (signed PDF for policies).
  • Register the document in COR-013 Document Control Log with version and review date.
  • Link to the record in your SOC-005 project plan or evidence index when ready.

Next Steps

After customizing AI Risk Tiering & Classification Guide:

  1. 1Complete the file: Finish every section or tab in AI-005.
  2. 2Register: Log version in COR-013; update AI-006 if this affects a production system.
  3. 3Operationalize: Deploy controls (e.g., AI-010 rules, AI-008 HITL) where this doc requires them.
  4. 4Workforce: Pair policies with AI-016 acknowledgments and security awareness (SOC-006).