Robustness describes an AI system's ability to maintain performance despite variations or adversarial conditions in the environment.

The most critical reason for documenting AI-related risks is toreduce exposure to legal, regulatory, and reputational liabilities. Clear documentation demonstrates thatrisks were identified, assessed, and addressed, which is essential for accountability and defensibility in the face of audits, litigation, or enforcement actions.
From theAI Governance in Practice Report 2024:
"An effective AI governance model is about collective responsibility... which should encompass oversight mechanisms such as privacy, accountability, compliance." (p. 13)
"Accountability... is based on the idea that there should be a person or entity that is ultimately responsible for any harm resulting from the use of the data, algorithm and AI system's underlying processes." (p. 28) While transparency, alignment with standards, and knowledge sharing are all secondary benefits,risk documentation's primary role is liability mitigation.

According to the White House Executive Order on the Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence (Executive Order 14110), the responsibility for creating guidelines to conduct red-teaming tests of AI systems falls to the National Institute of Standards and Technology (NIST). Specifically, the Executive Order directs NIST to establish guidelines and best practices for developing and deploying safe, secure, and trustworthy AI systems, including the creation of standards and procedures for developers to conduct AI red- teaming tests.

The EU AI Act explicitly prohibits the use of AI systems for social scoring by public authorities, as it can lead to discrimination and unfair treatment of individuals based on their social behavior or perceived trustworthiness. While AI can be used to promote equitable distribution of welfare benefits, manage border control, and even detect an individual's intent for law enforcement purposes (within strict regulatory and ethical boundaries), implementing social scoring systems is not permissible under the Act due to the significant risks to fundamental rights and freedoms.

Modernizing compliance software is not a core or necessary activity when designing an integrated responsible AI compliance strategy. It may support operations later, but it is not a typical or essential early step compared to governance approval, stakeholder input, and ethical consultation.