Frame an AI red-team scenario as a risk story linking actor, condition, weakness, behavior, and business impact.
A prompt list is not a risk assessment. NIST SP 800-30 separates threat source, vulnerability, threat event, likelihood, and impact. That separation is valuable for AI red teaming because AI systems create many weird outputs, but only some become meaningful risk. ## The Risk Story Form Use this sentence: Given actor A and condition B, the AI system could do C, causing impact D. Then add what would make it more or less likely. This prevents two errors: chasing spectacular but irrelevant prompts, and underestimating boring failures that touch sensitive data or business authority. ## What It Changes The risk…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in