DARR
MR-048 Human & usage Organization scope

AI competence and skills gaps in the organization

The deployer lacks the AI expertise, literacy, or capacity needed to safely develop, procure, and operate AI systems.

Risk family
Human & usage
MIT domain
6. Socioeconomic and Environmental
MIT subdomain
6.5 > Governance failure
AI type
GPAI, Classical_ML, Agentic
Scope
Organization
Source standard
MIT AI Risk Repository v4

Provenance

Source standard
MIT AI Risk Repository v4
Source frameworks
Hogenhout2021, Wirtz2022
ISO/IEC references
23894 obj A.3; src 4 | 42001 ctrl A.4.6, A.3.2
EU AI Act articles
Art. 4

Framework crosswalk

Every framework item mapped to this risk. Items marked partial overlap only in part; definitions appear on hover where the source licence permits.

Sourcesframeworks that contributed to the register
ISO 238941
  • A.3 ISO/IEC 23894 Annex A A.3
ISO 420012
  • A.3.2 ISO/IEC 42001 Annex A A.3.2
  • A.4.6 ISO/IEC 42001 Annex A A.4.6
EU AI Act1
  • Art. 4
Cross-checksframeworks mapped in to test coverage
IBM1
  • ibm-lack-of-domain-expertise Lack of domain expertise partial

Part of the Deployer AI Risk Register, an open-source resource developed by MindXO. Version 1.0, 3 July 2026. Derived from the MIT AI Risk Repository (V4, December 2025) under CC BY 4.0; an independent derivative work, not endorsed by or affiliated with MIT. Sub-risk decomposition references MITRE ATLAS™ v5.6.0 (© 2021-2026 The MITRE Corporation, reproduced and distributed with permission). ISO/IEC and EU AI Act references are by number only. License: CC BY 4.0. Full attribution and licensing.