AI Risk and Impact Assessment Methodologies

How practitioners actually run AI assessments: the taxonomy of instruments (AIA, DPIA, FRIA, validation), Canada’s scored AIA, GDPR and AI Act triggers, severity scoring and its critiques, residual-risk sign-off, and how to run one assessment machine instead of five.

Content current as of 2026-09.

Lessons

  1. One system, five assessments: the taxonomy
  2. DPIA and FRIA: running the European pair
  3. Canada’s AIA: the scored assessment, dissected
  4. Harms analysis, scoring mechanics, and who signs
  5. Running the machine: one workflow, many outputs