Describe the difference between proactive and reactive risk management in AI projects.

Describe the difference between proactive and reactive risk management in AI projects.

• A. Proactive aims to prevent issues through planning and controls; reactive responds to issues after they occur with mitigation.
• B. Proactive is about post-incident analysis; reactive about initial planning.
• C. They are the same; no difference.
• D. Proactive means ignoring risks; reactive means escalating only after launch.

Answer: (A)

Proactive risk management in AI projects focuses on preventing problems before they happen. It involves upfront planning, identifying potential risks early, and putting controls in place across the AI lifecycle—data governance, model validation, fairness and safety checks, privacy protections, security measures, and ongoing monitoring—to catch and stop issues before deployment. Reactive risk management, on the other hand, deals with what happens after a problem occurs: detecting the incident, containing it, mitigating its impact, and performing root-cause analysis to remediate and adjust processes so similar issues are less likely in the future. So the best description is that proactive aims to prevent issues through planning and controls, while reactive responds to issues after they occur with mitigation. The other options misstate the timing or the nature of the approaches.

Proactive risk management in AI projects focuses on preventing problems before they happen. It involves upfront planning, identifying potential risks early, and putting controls in place across the AI lifecycle—data governance, model validation, fairness and safety checks, privacy protections, security measures, and ongoing monitoring—to catch and stop issues before deployment.

Reactive risk management, on the other hand, deals with what happens after a problem occurs: detecting the incident, containing it, mitigating its impact, and performing root-cause analysis to remediate and adjust processes so similar issues are less likely in the future.

So the best description is that proactive aims to prevent issues through planning and controls, while reactive responds to issues after they occur with mitigation. The other options misstate the timing or the nature of the approaches.