Risk Aggregation Scoring in AI Inventories

Important:

In order to use Risk Aggregation Scoring for AI Governance, your tenant must be migrated to the latest Risk Scoring Methodology. For more information, see Risk Aggregation Upgrade Guide.

For additional guidance or issues with your migration, please contact OneTrust Support.

Manage the scoring formula and ranges of Risk Aggregation attributes for your inventories in AI Governance. These attributes, which appear in the Details tab in the Inventory Details screen, provide context to the inventory's posed risk according to your organization's configured ranges.



Once enabled, formula and risk score attributes can be selected in workflow rules and automation rules for supported AI Governance objects.

To configure scoring formulas

These steps show how to update the default attribute provided by OneTrust. To create a custom risk aggregation attribute(s), see Managing Attributes for AI Governance.

  1. On the AI Governance menu, select Setup > Attribute Manager.

    The Attribute Manager screen appears.

  2. Click the View button for your desired attribute type: Datasets, Models, Projects, or Vendors.

    The Object Details screen appears.

  3. In the Attributes tab, select an attribute key for one of the available Risk Aggregation attributes.

    • Aggregated Inherent Risk Score

    • Aggregated Risk Score

    • Aggregated Target Risk Score

  4. Go to the Formula tab to review the default scoring formula.
  5. To customize the attribute's scoring formula, click the Edit Formula button.
  6. Search the available functions and attributes to build a risk formula for this attribute.

    You can use multiple attributes in the mathematical formula. To add multiple attributes to your formula, separate the attribute values with commas and place the attribute values inside the parenthesis of the formula.

    The standard characters needed for mathematical functions include: Multiplication: *, Addition: +, Subtraction: -, Division: /


    Attribute details
  7. Use the Test Validation button to check the formula syntax.
    Note:

    If the Invalid Formula Syntax error message appears, please correct the formula. You will not be able to save the update until the formula is validated.

  8. Click the Save button. If you have updated the formula, the Rescore modal will appear to confirm this action.

    Rescore modal

To configure scoring levels

  1. On the AI Governance menu, select Setup > Attribute Manager.

    The Attribute Manager screen appears.

  2. Click the View button for your desired attribute type: Datasets, Models, Projects, or Vendors.

    The Object Details screen appears.

  3. In the Attributes tab, select an attribute key for one of the available Risk Aggregation attributes.

    • Aggregated Inherent Risk Score

    • Aggregated Risk Score

    • Aggregated Target Risk Score

  4. Go to the Formula tab to review the default scoring levels below the formula.
  5. Customize the score levels' color, ranges, and names, plus add or remove levels to refine the scoring matrix.

    Score levels
  6. Click the Save button. If you have updated the scoring levels, the Rescore modal will appear to confirm this action.

    Rescore modal