About the register.
The Deployer AI Risk Register is an open-source AI risk register powered by MindXO: a canonical register of AI risks for organizations that deploy AI systems, consolidated from the MIT AI Risk Repository and gap-analysed against ISO/IEC 23894 and 42001, MITRE ATLAS, and the EU AI Act with the GPAI Code of Practice, then coverage-checked against the IBM, Cisco, NIST, and OWASP taxonomies.
It is written for organizations that deploy AI systems rather than build them. Each of the 82 canonical risks has a stable identifier (MR-001 to MR-082) and a permanent page; 12 of them carry 61 technique-level sub-risks anchored to MITRE ATLAS. The methodology documents how every risk earned its place, and the source and data are on GitHub.
Frequently asked questions
How do I build an AI risk register?
Start from a canonical list of AI risks rather than a blank page. A practical path: scope the register to the deploying organization; adopt a risk taxonomy (the Deployer AI Risk Register groups 82 canonical risks into seven families); map each risk to the standards in force, such as ISO/IEC 42001 and the EU AI Act; then assign an owner and a treatment to each. DARR provides the open starting catalogue: download the CSV or JSON, keep the stable MR-001 to MR-082 identifiers, and extend it with detail specific to the deployment.
What should an AI risk register include?
For each AI risk, a register should record a stable identifier, a plain-language description, the risk family or category, the external standards and controls it maps to (for example ISO/IEC 42001, the EU AI Act, or MITRE ATLAS), an accountable owner, and the treatment or mitigation status. The Deployer AI Risk Register supplies the first four for 82 canonical risks, so a deployment only needs to add ownership and treatment.
What is a deployer AI risk register?
A deployer AI risk register is a catalogue of the AI risks that fall on an organization which runs or deploys AI systems, rather than the lab that builds them. The Deployer AI Risk Register (DARR) is an open, free version: 82 canonical risks across seven families, each with a stable identifier and a permanent page.
How is deployer AI risk different from developer AI risk?
Developer risk sits with the organization that trains and ships a model, at the level of pre-training data, architecture, and alignment. Deployer risk sits with the organization that procures, configures, operates, and monitors an AI system in production. Developer-stage issues such as training-data bias are kept where they still surface for the deployer as unfair outputs; risks a deployer cannot observe or measure are set aside.
What AI risks apply to an organization that deploys AI?
The register sorts them into seven families: model and system behaviour; data, privacy and content liability; security and adversarial attack; third-party and supply chain; human and usage; governance and process; and regulatory compliance. In total, 82 canonical risks, with 61 MITRE ATLAS-anchored sub-risks beneath the security-related ones.
How does the EU AI Act map to the register?
Deployer obligations in the EU AI Act (Regulation 2024/1689) and the GPAI Code of Practice were read backward into risks: 11 became dedicated compliance gap risks, and 36 risks in total carry EU article references. The EU AI Act crosswalk lists every mapping.
How does ISO/IEC 42001 map to the register?
ISO/IEC 42001 and 23894 management-system obligations were mapped the same way: 9 governance and lifecycle gaps were added, and 70 risks carry ISO clause references. The ISO/IEC 42001 crosswalk shows the item-level detail.
What is the MITRE ATLAS crosswalk?
MITRE ATLAS is an adversarial-technique taxonomy. The register decomposes 12 canonical security and misuse risks into 61 technique-level sub-risks anchored to MITRE ATLAS v5.6.0, and the reverse crosswalk maps all 170 ATLAS entries back to the register or records why they sit out of scope.
Is the register free to use, and how is it cited?
It is free and open under CC BY 4.0, for any use including commercial, with attribution. Cite it as: Deployer AI Risk Register, MindXO, version 1.0. The download page carries the plain-text and BibTeX citation and the full dataset.
How many AI risks does the register cover?
82 canonical risks and 61 MITRE ATLAS-anchored sub-risks, for 143 register rows across seven families, each consolidated from the MIT AI Risk Repository and cross-checked against ten external frameworks.
Versioning
This is a living register. This publication is version 1.0, 3 July 2026. Future versions will track new framework releases and register refinements; the changelog lives on this page.
- 1.0 (3 July 2026): first public release. 82 canonical risks, 61 MITRE ATLAS-anchored sub-risks, 143 register rows.
Sources in this version
The exact editions this release was built and cross-checked against. When a source publishes a newer version, the difference becomes a candidate change for the next register release.
| Source | Version used | Role |
|---|---|---|
| MIT AI Risk Repository | V4 (December 2025) | Foundation |
| ISO/IEC 23894 | 2023 | Source |
| ISO/IEC 42001 | 2023 | Source |
| MITRE ATLAS | v5.6.0 | Source |
| EU AI Act | Regulation (EU) 2024/1689 | Source |
| GPAI Code of Practice | Final (10 July 2025) | Source |
| IBM AI Risk Atlas | Accessed July 2026 | Cross-check |
| Cisco Integrated AI Security and Safety Framework | December 2025 | Cross-check |
| NIST AI 100-2 (Adversarial ML) | e2025 (March 2025) | Cross-check |
| NIST AI 600-1 (Generative AI Profile) | 2024 | Cross-check |
| OWASP Top 10 for LLM Applications | 2025 | Cross-check |
| OWASP Top 10 for Agentic Applications | 2026 | Cross-check |
Attribution and licensing
Deployer AI Risk Register is derived from the MIT AI Risk Repository (V4, December 2025), used under CC BY 4.0. It is an independent derivative work and is not endorsed by or affiliated with MIT. The security decomposition references MITRE ATLAS™ (v5.6.0). © 2021-2026 The MITRE Corporation; this work is reproduced and distributed with the permission of The MITRE Corporation, under the non-exclusive, royalty-free license granted in the MITRE ATLAS Terms of Use for research, development, and commercial purposes. MITRE ATLAS™ is a trademark of The MITRE Corporation; its use here does not imply MITRE's endorsement. ISO/IEC 23894:2023, ISO/IEC 42001:2023, the EU AI Act (Regulation (EU) 2024/1689), and the GPAI Code of Practice are referenced by clause, control, article, and commitment number only; no licensed or official text is reproduced. Coverage checks reference the IBM AI Risk Atlas and the Cisco AI Security Framework (Apache 2.0), NIST AI 100-2 and AI 600-1 (US public domain), and the OWASP Top 10 for LLM and for Agentic Applications (CC BY-SA 4.0).
The open dataset on this site is published under CC BY 4.0. Attribute it as described on the download page.
AI-assistance disclosure
The register was produced with AI assistance under human direction, with a documented human review of the register content. The methodology page describes the process, including the validation and review steps.
Contact
Corrections, questions, or mapping requests: contact MindXO, or open an issue on GitHub.
Terms of use
The register content is open under CC BY 4.0 (see Attribution and licensing): free to use, share, and adapt, including commercially, with attribution. The build scripts are MIT-licensed. The register and this site are provided as is, without warranty of any kind, and are general information, not legal, regulatory, or professional advice.
Privacy
This is a static site. It sets no cookies of its own, runs no analytics, and has no accounts or logins. Ordinary browsing collects no personal information. Web fonts and source logos are served from this site rather than a third party, so ordinary pages trigger no third-party requests. The host, Netlify, keeps standard server access logs, including IP addresses, to operate and secure the site.
The exceptions are the site's forms: the contribution form and the update-notification signup on the download page. Submitting a form sends the details entered (an email address, and for the contribution form also a name, organization, area of interest, and details), so a maintainer can review and follow up; it also triggers an automatic acknowledgement email in reply. Forms are processed by Netlify Forms (the host) and screened for spam, with the contribution form additionally protected by Cloudflare Turnstile; acknowledgement email is delivered through a transactional email provider. The data is used only to handle the request and is not shared or sold. Submitting is optional. A submission is retained only as long as needed to act on it, and can be corrected or removed on request by email to MindXO, which maintains the register.
Part of the Deployer AI Risk Register, an open-source resource powered by MindXO. Version 1.0, 3 July 2026. Derived from the MIT AI Risk Repository (V4, December 2025) under CC BY 4.0; an independent derivative work, not endorsed by or affiliated with MIT. Sub-risk decomposition references MITRE ATLAS™ v5.6.0 (© 2021-2026 The MITRE Corporation, reproduced and distributed with permission). ISO/IEC and EU AI Act references are by number only. License: CC BY 4.0. Full attribution and licensing.