09.05 - Residual Risks

After identifying risk and applying the mitigations, an organisation can eliminate or reduce risk. The risk management measures referred to in 09.02 point 3 shall be such that any residual risk associated with each hazard, as well as the overall residual risk of the high-risk AI systems, is judged acceptable, provided that the high-risk AI system is used in accordance with its intended purpose or under conditions of reasonably foreseeable misuse. Those residual risks shall be communicated to the user.

Seclea Platform provides two checks for Residual Risks: Residual Risk Communication and Residual Risk Assessment.